AWS Incident Response Program

Is your organization ready to respond to a critical cyber security incident? Work with ScaleSec experts to develop and launch a tailored program that covers your bases and prepares your team, processes, and technology for incident handling on AWS.

Detecting and managing incidents in AWS requires a well-defined, practiced workflow and enabled technology. This offering includes the following activities:

• Discovery
• Review existing applicable technology, tools, processes
• Develop incident response plan with phases, milestones, timelines, and roles and responsibilities
• Develop workflows, processes, and runbooks
• Prepare people
• Prepare technology - develop
• Tabletop exercise (or live drill)

Applicable AWS services include:

• AWS storage services (as applicable)
• AWS database services (as applicable)
• AWS Lambda
• AWS Security Hub
• Amazon Detective
• AWS CloudTrail
• Amazon GuardDuty
• Amazon CloudWatch
• AWS Backup
• AWS Shield
• AWS Support
• AWS Trusted Advisor

ScaleSec incorporates industry standard frameworks and AWS guidance including:

• NIST 800-61 Incident Handling Guide
• NIST Cybersecurity Framework
• AWS Security Incident Response Guide
• AWS Cloud Adoption Framework - Security Perspective
• AWS Well Architected Framework - Security Pillar

Outcomes for this offering include:

• Incident response plan
• Workflows, process definitions
• Sample code for automation
• IR Runbook for AWS