Incident Response Legos
Incident Response (IR) is not a flowchart.
Or, at least, it shouldn’t be.
It’s impossible to create a detailed flowchart of how you’re going to handle absolutely every incident that can happen in your organization. There are far too many factors and variables in play.
Don’t think in flowcharts or decision trees.
Think of incident response (and your core skills as a SOC analyst) as Lego bricks.
Instead of trying to have an IR flowchart, build skills you can utilize. Assemble your IR knowledge in a variety of ways to meet the challenge you’re encountering. This allows you to react to a wide variety of types of incidents that can occur in your organization.
Your IR capabilities are flexible, sharp, pointy, and horrible to step on.
Behind-the-Zines
The original design request for this was an elaborate LEGO house illustration. Sometimes simple is better! Our designer found this super cool Lego photo and embraced the retro distressed look, making it look like an old toy ad.
