Topic: The Complete Incident Response Playbook: Building Business Resilience
Abstract: Cyber incidents are no longer isolated technical events; they can disrupt critical operations, expose sensitive data, affect customers, and create significant financial and regulatory consequences. Therefore, building resilience requires organizations to move beyond simply having an incident response plan toward developing a structured, repeatable, and business-aligned response capability. This webinar, part of the ‘The Complete IR Playbook’ series, explores the essential components of a comprehensive incident response playbook, covering preparation, detection, triage, containment, eradication, recovery, and post-incident improvement. It will examine how security teams can establish clear roles and responsibilities, escalation paths, communication protocols, decision-making processes, and coordination across security, IT, legal, compliance, privacy, communications, and business leadership. The session will also explore how organizations can strengthen readiness through tabletop exercises, continuous improvement, response metrics, and lessons learned. Join us to gain insights into how to connect incident response with business continuity, crisis management, and enterprise risk management to build stronger organizational resilience.
Key Takeaways:
- Understanding the end-to-end incident response lifecycle
- Building a structured and repeatable incident response playbook
- Aligning incident response with business continuity, crisis management, and enterprise risk management
- Improving collaboration between SOC, IT, legal, compliance, privacy, communications, and executive teams
- Establishing meaningful incident response metrics and KPIs to measure readiness and effectiveness
- Utilizing post-incident reviews and lessons learned to create a continuous improvement cycle
Speaker:
Eder Ribeiro, Director, Global Incident Response, TransUnion
Bio: Eder is a founding member and leader of CyberScout’s (A TransUnion Company) Incident Response Forensics (IRF) team. The IRF team focuses on Digital Forensics Incident Response services to the insurance market and law firms. Eder and his team support IRF operations in the US, Canada, Australia, and select jurisdictions in Europe and Latin America. Eder also leads the US breach notification/fulfillment team, which is part of TransUnion’s uniquely holistic approach to cyber. Eder has a background in cybersecurity, privacy, incident response, and leadership. Prior to joining TransUnion, Eder earned a Juris Doctor with a focus on privacy, compliance, contracts, and corporate law from Roger Williams University School of Law. Eder also earned a Master of Science degree in Cybersecurity from Roger Williams University. Eder has served and continues to serve as a Non-Commissioned Officer in the Rhode Island Army National Guard for 20 years, including a tour of duty in the Kandahar province, Afghanistan, in support of Operation Enduring Freedom.
