Incident Response Readiness Planning Services

How we can assist:

IR Readiness Commencement and Review

Tesserent starts with a kick-off meeting and documentation reviews to understand your organisation, roles and responsibilities, objectives, regulatory environment, policies and procedures, communication protocols and technology landscape.

IR Plan Review and Playbook Development

Incident Response Plan Review

The IR Plan Review involves stakeholder discussions, documentation reviews, and compliance with an industry baseline such as NIST SP 800-61R2 – Computer Security Incident Handling.

Incident Response Plan Creation or Update

Based on the review and your requirements, we can create or update your Incident Response Plan in alignment with an industry baseline.

Playbook Development or Update

Where necessary, we collaborate with stakeholders to create or update Incident Response Playbooks. Each playbook serves as an actionable guide to address a specific cyber incident scenario, capturing the unique, appropriate steps and actions to respond and recover.

Typical scenarios include:

• Account Compromise

• Ransomware

• Denial of Service

• Data Breach

• Malware

Scenario Preparation

With the agreed scenarios and related collateral, including wider business context, Tesserent works to create tabletop exercises drawing on industry best practices, real-world attack patterns and threats, and experience from prior engagements.

We typically tailor tabletop exercises for two streams: Executives and Technical teams. We can run the exercise individually or as a dual-group event. By running dual-group exercises, you gain consistency in assessing the readiness and awareness of incident response plans and procedures across stakeholder groups. Here, the scripts and focus are tailored to the expected roles and responsibilities of each specific group.

IR Tabletop Exercises

Our team facilitates an immersive, hands-on training and incident response testing (tabletop) experience for key stakeholders, IT teams, and decision-makers. This service allows organisations to evaluate their existing incident response strategies, identify gaps, and refine procedures for swift and effective responses.

We lead your team through the attack scenarios, with stakeholders role-playing to discuss and deliberate on responsibilities and strategy, while we observe responses, documenting what occurs, to identify key areas of improvement. Tesserent may include 'curve balls' for each unique environment; challenging assumptions to identify gaps or alternative attack vectors that could occur in real life. This helps create a thoughtful and productive exercise for the stakeholders.