Real-time Deployment of Incident Response Roadmap
AssigneeCybersponse, Inc.
InventorJoseph Loomis
Life of this patent
Estimating the term…
Abstract
In various representative aspects, a method and a system that guide an incident response team to efficiently respond to an information security incident based on a roadmap are disclosed herein. A delegated incident response lead may oversee the whole process, including the creation of the roadmap, the performance of the team members, and the statuses of all tasks. When an incident occurs, incident response team members are notified, and delegated tasks in the roadmap are laid out. With a secure collaboration platform, the incident response team may work together in a secure, uncompromised environment.
Claims26
A system for guiding an incident response (IR) team member comprising:
- a. a computer having a processor;
- b. a database coupled to the computer;
- c. a non-transitory processor-readable storage medium coupled to the computer and storing executable instructions configured to:
- i. receive an event data;
- ii. create an incident based on the event data;
- iii. notify an IR Lead of the incident;
- iv. display an incident editing user interface to allow the IR Lead to modify an attribute of the incident;
- v. associate the incident to a roadmap pre-existing in the database, based on the attribute of the incident;
- vi. display a roadmap editing user interface to allow the IR Lead to modify the roadmap;
- vii. deploy the roadmap by notifying the IR team member of at least one delegated task in the roadmap and monitoring a status of the delegated task;
- and
- viii. update and display the status of the delegated task to the IR Lead and the IR team member.
A method for guiding an incident response (IR) team member comprising the steps of:
- a. receiving an event data;
- b. creating an incident based on the event data;
- c. notifying an IR Lead of the incident;
- d. displaying an incident editing user interface to allow the IR Lead to modify an attribute of the incident;
- e. associating the incident to a roadmap pre-existing in a database, based on the attribute of the incident;
- f. displaying a roadmap editing user interface to allow the IR Lead to modify the roadmap;
- g. deploying the roadmap by notifying the IR team member of at least one delegated task in the roadmap and monitoring a status of the delegated task;
- and
- h. updating and displaying the status of the delegated task to the IR Lead and the IR team member.
Dependencies are inferred from the claim text.