After an Attack

A playbook will help you scope preparedness for the entire incident response. This document focuses on medical devices but a broader view is being developed.

NIST Data Integrity: Recovering Practice guide gives guidance on how to recover from data corruption events.

Resources

NIST Cybersecurity Framework

Before
During
After

identify

  • ATT&CK
  • Caldera
  • Assessments
  • CORA
  • Crown Jewels
  • Exercises

protect

  • Architecture
  • Operations
  • Device Pre-Certs
  • Deception
  • Data Security

Detect

  • Sensors
  • Analytics
  • Data Analysis
  • AI/ML
  • Alerting

respond

  • Playbook
  • Targeted Analytics
  • Signature Dev’t
  • Resilience

recover

  • Cleanup
  • Data Recovery
  • Reporting

Pin It on Pinterest

Share This