Incident Response: Practice Like you Play - Paul Kelly, Tim Morris - ESW #282

Heightened emotions, demands for updates, not knowing how bad things might be...

Incident response isn't easy, but practice and the right tools can make it a whole lot less stressful. Some regulations like PCI require annual IR tests, but is that enough? Imagine playing a sport where the team meets for one half-hearted practice once a year. How would that team perform under pressure? How would they communicate?

Say this sports analogy has convinced you - the IR team should …

incident incident response paul play practice response tim