Data Breach Planning & Response: Playbooks Session

• The basic building blocks of a good and effective playbook
• How NOT to respond to incidents, attacks and data-breaches: pitfalls to avoid when creating playbooks.
• Triage, what it is, it’s role in incident management
• How to use playbooks to aid in triage
• Definition of a breach - why you need this and how to roll this out in your organisation.
• Creating Scenarios - deep dive into creating effective scenarios.
• Creating playbooks - starting from a basic to complex playbooks - Multiple interactive sessions
• Management playbooks - how to build and engage management to use playbooks.
• Running internal workshops - how to ensure maximum participation and effective results.
• Understand the technology stack required to deliver automation.
• Understand the role of SOAR (security orchestration and response) and the tools that you can use.
• Organisational Capability and the role of playbooks in increasing staff skills and retention

• Applicable knowledge to create and use actionable playbooks.
• Useful templates and collateral you can deploy in your organisation.
• Understanding SOAR and technologies and automation to help in the "heavy lifting" of manual tasks.
• Avoid the common pitfalls of incident response plans and playbooks.

Learning Objectives:

• List key benefits of playbooks and recognise their significance in enabling an organisation’s cyber resiliency.
• Understand the basics of creating playbooks and describe the key components required to create them.
• Communication strategies during a data breach.
• Create organisation-specific attack scenarios.
• Analyse and Assess the scenario and select the appropriate playbook.
• Construct simple and complex playbooks.

Target audience:

• IT Technicians
• Level 1, level 2, IT support
• Network engineer
• Windows, Unix and Max engineers
• SOC Analysts (all levels)
• IT Manager, Network Manager
• Change Managers
• Service Managers
• BCP Manager
• CISO / Head of IT security
• Risk Managers
• Head of IT
  
  

Meet the Trainer 

Amar Singh has a long history and experience in data privacy and information security. Amar has served as CISO for various companies, including News International (now News UK), SABMiller, Gala Coral, Euromoney and Elsevier. Amongst various other activities, Amar is a Global Chief Information Security Officer and Trusted Advisor to a number of organisations including a FTSE100 firm, and is chair of the ISACA UK Security Advisory Group. He also founded the not-for-profit cyber security service for charities, Give01Day.

Amar has the highest integrity and is trusted by FTSE100 companies with some of the most sensitive commercial information, and has been involved with highly sensitive forensic investigations.

He has the ability to deal with both the technically astute, board-level executives and lead an organisation's information security direction. Apart from his experience and abilities, Amar holds a number of industry-recognised certifications, such as ISO 27001 Certified ISMS Lead Implementer, MoR, CRISC and CISSP certification.

Amar is an industry-acknowledged expert and public speaker and is regularly invited to speak and share his insights by some of the largest and most respected organisations in the world including The BBC, The Economist’s Intelligence Unit, The Financial Times, SC Magazine, InfoSec Magazine, Computer Weekly, The Register and the AlJazeera English Channel.

All trademarks, service marks, trade names, product names, service names and logos appearing on the site, or on printed or digital material are the property of their respective owners, including in Cyber Management Alliance Ltd. Any rights not expressly granted herein are reserved.