Performing Ransomware Response

More in Operations

• Implementing Ticketing System For IncidentsConnects security alerts to Jira or ServiceNow for tracked incidents and SLAs.
• Performing Physical Intrusion AssessmentGuides authorized physical penetration tests of facilities and server rooms.
• Performing Privileged Account Access ReviewConducts systematic reviews of privileged accounts to validate access rights.
• Performing Purple Team ExerciseCoordinates red and blue teams in a purple team security exercise.
• Performing Soc Tabletop ExerciseRuns tabletop exercises for SOC teams simulating security incidents without system impact.
• Prioritizing Vulnerabilities With Cvss ScoringRanks security vulnerabilities by severity using CVSS scores.
• Triaging Security IncidentTriages security incidents, classifying type and priority using NIST and SANS frameworks.
• Triaging Vulnerabilities With Ssvc FrameworkPrioritizes security vulnerabilities using CISA's SSVC decision framework.