Detection and Response

A template for your incident response plan

Cyber security incidents can be high-pressure situations with serious consequences for both businesses and individuals alike. That stress can compromise decision making (especially when tired!) and a good cyber incident response plan helps organisations to get their response right. Recently while working with a client on improving their blue team and incident response capability they mentioned that they hadn’t been able to find an example of a good cyber incident response plan.

More A template for your incident response plan...

Security Watercooler: Communicating your recovery, with Jessica Lennard

This week we are trialling an idea around a virtual ‘Security Watercooler’. 25~30 min video calls to break up the day and showcase different viewpoints. Check out more about the concept here. Today Robin Oldham was joined by Jessica Lennard to discuss the communicating your recovery. Here are the summary notes from the call: For lots of security people ‘recovery’ has very technical roots: rebuilding and patching systems, addressing security vulnerabilities, and so on.

More Security Watercooler: Communicating your recovery, with Jessica Lennard...

Security Watercooler: Remote incident response, with ContextIS' Stephanie Albertina

This week we are trialling an idea around a virtual ‘Security Watercooler’. 25~30 min video calls to break up the day and showcase different viewpoints. Check out more about the concept here. Today Robin Oldham was joined by ContextIS’ Stephanie Albertina to discuss the remote incident response. Here are the summary notes from the call: As a CIR firm around 70-80% of Context IS’ response work is already conducted remotely.

More Security Watercooler: Remote incident response, with ContextIS' Stephanie Albertina...

Security Watercooler: Adapting detection to deal with remote working, with F-Secure's Tim Orchard

This week we are trialling an idea around a virtual ‘Security Watercooler’. 25~30 min video calls to break up the day and showcase different viewpoints. Check out more about the concept here. Today Robin Oldham was joined by F-Secure‘s Tim Orchard to discuss the adapting detection to deal with remote working. Here are the summary notes from the call: It is really important to start by asking yourself ‘what are you defending?

More Security Watercooler: Adapting detection to deal with remote working, with F-Secure's Tim Orchard...