FOR SOC TEAMS, IT LEADS AND INCIDENT-RESPONSE COORDINATORS
The decision this helps prepare
Can the people, records and authorities needed for a response be found when required?
What the review covers
- Signals
- Triage
- Response
- Learning
Useful information to have nearby
- Log-source health checks
- Triage and escalation responsibilities
- Tabletop decisions and an improvement register
Use references and non-sensitive summaries. Do not paste account credentials, private client records or raw vulnerability evidence.
Example questions
- Are priority threats linked to the logs you collect?
- Are severity and escalation criteria understood?
- Are communication responsibilities and external obligations reviewed?
After the review
Use the gaps to plan a realistic exercise. This questionnaire does not establish monitoring coverage or response effectiveness.
Review unknown answers, save a local snapshot, export a report or make a current-to-target plan. You can use the result without sending a message.
Scope and reference
12 original operational screening prompts. Does not measure incident-response effectiveness or establish 24/7 operational coverage.
Questions are original. The reference provides context and does not endorse this website.
Read the reference