Skip to content

Incidents and continuity

6 skills in this category.

Business impact analysisUse this skill when a company needs recovery objectives it can defend, before a continuity plan, a disaster recovery design, an audit or a resilience review, and asks "do a BIA", "business impact…Incidents and continuityISO 27001, DORA, NIS 2, GeneralTristan Roth
Continuity tabletop designUse this skill when a company must test its incident response or continuity plan without breaking anything, because an audit, a customer, a regulator or the plan itself calls for an exercise, and…Incidents and continuityISO 27001, SOC 2, DORA, NIS 2Tristan Roth
Incident response plan draftingUse this skill when a company has no incident response plan, has one copied from a template that names teams it does not have, or an auditor, customer or insurer asks for it, and the team says "write…Incidents and continuityISO 27001, SOC 2, HIPAA, NIS 2Tristan Roth
Incident severity triageUse this skill when something is happening now: an alert, a suspicious login, a ransomware note, data sent to the wrong customer, an outage that might be an attack, and someone asks "how bad is…Incidents and continuityGeneral, ISO 27001, SOC 2, NIS 2, DORATristan Roth
Post-incident reviewUse this skill when an incident or a serious near miss is closed and the team must learn from it, or an auditor asks for lessons learned, and someone says "run the post-mortem", "post-incident…Incidents and continuityGeneral, ISO 27001, SOC 2Tristan Roth
Regulatory incident reporting clockUse this skill when an incident may have to be reported to an authority, customers or affected people, and the team asks "do we have to notify", "72 hours", "24 hour early warning", "is this a…Incidents and continuityNIS 2, DORA, GDPR, HIPAATristan Roth