حوكمة ومخاطر وامتثال الأمن السيبراني (GRC) 17 بند
Cybersecurity Incident Response Readiness Checklist
قائمة التحقق هذه باللغة الإنجليزية.
Assesses incident response capability across preparation, detection, containment, eradication, recovery, and post-incident activity.
NIST 800-61r2ISO 27001:2022SOC 2
PDF أو Word مجانًا · أدخل بريدك الإلكتروني للتنزيل.
Preparation
- Is a documented incident response plan approved and maintained? *
- Is an incident response team defined with roles and contact information? *
- Are severity classification and escalation criteria defined? *
- Are IR tools, jump kits, and communication channels prepared in advance? *
Detection & Analysis
- Are detection sources (SIEM, EDR, IDS) monitored to identify incidents? *
- Is a process defined to triage and validate alerts as incidents? *
- Are incidents documented with timelines and evidence from the outset? *
Containment, Eradication & Recovery
- Are short-term and long-term containment strategies defined? *
- Are procedures defined to eradicate threats and remediate root cause? *
- Is evidence preserved with proper chain of custody for potential legal action? *
- Are recovery and validation steps defined to restore systems safely? *
Communication & Reporting
- Are internal and external notification requirements (regulators, customers) defined? *
- Are breach notification timelines mapped to applicable regulations? *
- Is a designated spokesperson identified for external communications? *
Post-Incident Activity
- Is a lessons-learned review conducted after major incidents? *
- Are tabletop exercises conducted at least annually? *
- When was the most recent incident response exercise conducted?
نزّل قائمة تحقق Cybersecurity Incident Response Readiness Checklist كاملة
احصل عليها مجانًا بصيغة PDF أنيقة قابلة للطباعة أو مستند Word قابل للتعديل.