Make decisions during an incident
Managers, business teams, CISOs and operations
- Prerequisites
- Know your organization’s services and stakeholders.
- Practice
- In a fictional scenario, choose what to isolate, who to involve and which evidence to retain. Revisit decisions when new information arrives.
- Takeaways
- Decision log, roles, recovery criteria and actions to rehearse.
- Learning assessment
- Explain the order of actions and the conditions for service restoration.
