Forgetting A Playbook

One area many insider threat protection programs struggle with his incident response, the panel agreed, as it is very different from how they might respond to external threats. Hancock said one thing he has found very helpful in developing incident response is building a Playbook. There, he said his company outlines strategies and responses to different types of situations so all departments are on the same page and have concrete steps in place to remediate a problem. As new problems arise, the Playbook can be added to.