Section 3: Designing and Implementing Incident Response in Organizations

Designing and implementing an incident response program goes beyond creating a playbook or installing an incident response system. In this part, you will learn how to identify the organization's requirements and maturity, work on incident response plans, and develop an incident response capacity. You will also learn how to integrate different security systems in an ecosystem to improve efficiency in terms of responding to, and investigating, security incidents.

This section comprises the following chapters:

• Chapter 8, Building an Incident Response Capability
• Chapter 9, Creating Incident Response Plans and Playbooks
• Chapter 10, Implementing an Incident Management System
• Chapter 11, Integrating SOAR Capabilities into Incident Response