Call +90 542 716 57 83
Email support
Someone is responsible for receiving security alerts or reports
Discuss ownership and the process for the real environment.
Incident readiness
Prepare for an incident readiness discussion
Review detection, containment, communications, recovery and follow-up responsibilities.
Prepare the conversation
Topics to discuss
Critical systems and business dependencies are identified
Discuss ownership and the process for the real environment.
Useful security events can be reviewed without relying on one person or device
Discuss ownership and the process for the real environment.
There is a way to disable or isolate a compromised account, device, service or credential
Discuss ownership and the process for the real environment.
Privileged access can be changed or revoked quickly when needed
Discuss ownership and the process for the real environment.
Important external providers and access paths are documented
Discuss ownership and the process for the real environment.
Backups or recovery paths exist for critical data and systems
Discuss ownership and the process for the real environment.
Restore procedures and responsible people are known before an incident
Discuss ownership and the process for the real environment.
Internal/external communication responsibilities are understood
Discuss ownership and the process for the real environment.
A simple timeline and evidence-preservation approach is defined
Discuss ownership and the process for the real environment.
After an incident, causes and control gaps are reviewed and assigned actions
Discuss ownership and the process for the real environment.
Contact me directly
Use WhatsApp, phone or email to discuss these topics and agree the next step. Keep passwords, API keys and recovery codes out of your message.