Organizations face continual threats from cyberattacks, and handling these incidents remains a significant challenge. Effective incident response (IR) is consequently critical to ensure business continuity and operational resilience. Despite the importance of IR, organizations are often not well-prepared to respond. Therefore, organizations need to understand their incident response readiness status and identify gaps therein to enhance their response capabilities. This paper presents a prototype of Incident Response-Readiness Self-Assessment Tool (IRRSAT) for evaluating organizational IR readiness, addressing the limitations of existing assessment models that typically focus on general security maturity rather than specific IR capabilities. The IRRSAT is built upon a validated framework that incorporates human, organizational, operational and external dimensions, utilizing Design Science Research (DSR) methodology. The proposed platform features interactive dashboards, customizable assessment forms, and comparative analytics, offering both descriptive assessment and prescriptive guidance for systematic improvement of IR preparedness.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A Prototype Tool for Incident Response Readiness Assessment

  • Aseel Aldabjan,
  • Steven Furnell,
  • Xavier Carpent,
  • Maria Papadaki

摘要

Organizations face continual threats from cyberattacks, and handling these incidents remains a significant challenge. Effective incident response (IR) is consequently critical to ensure business continuity and operational resilience. Despite the importance of IR, organizations are often not well-prepared to respond. Therefore, organizations need to understand their incident response readiness status and identify gaps therein to enhance their response capabilities. This paper presents a prototype of Incident Response-Readiness Self-Assessment Tool (IRRSAT) for evaluating organizational IR readiness, addressing the limitations of existing assessment models that typically focus on general security maturity rather than specific IR capabilities. The IRRSAT is built upon a validated framework that incorporates human, organizational, operational and external dimensions, utilizing Design Science Research (DSR) methodology. The proposed platform features interactive dashboards, customizable assessment forms, and comparative analytics, offering both descriptive assessment and prescriptive guidance for systematic improvement of IR preparedness.