I will create or review a cyber incident response plan

Cybersecurity incidents like ransomware infections are on the rise. Every organization needs an Incident Response Plan (IRP) to guide preparation for, detection of, and response to a cyber incident. I have conducted more than two thousand critical cybersecurity incident response engagements including Advanced Persistent Threat and ransomware incidents in IT, PCI, and OT/ICS networks in financial, health, energy, transportation, technology, and government organizations.

I can create a new incident response plan or review and update an existing plan based on security best practices to meet organizational and regulatory requirements.

See my other gigs for incident-specific playbooks, that augment the incident response plan, including ransomware, data compromise, insider threat, vendor compromise, credentials compromise, and generic malware playbooks.