Incident Response Assessment
Can you contain and recover from a cyberattack? Find out in 10 minutes.
What You'll Discover
Your IR Readiness Score
Get a comprehensive score (-250 to +200) showing your ability to detect, contain, and recover from cyber incidents across IR Plan, Team & Resources, Testing & Drills, and Communication.
Botched Response Cost Projection
See realistic cost estimates if poor incident response turns a containable incident into a catastrophic breach due to delays and mistakes.
Containment Time Analysis
Understand how long it would take to detect, contain, and recover from an incident - hours mean minimal damage, weeks mean catastrophe.
IR Gap Identification
Learn exactly where your response capabilities fall short - from missing playbooks to lack of testing - with specific remediation steps.
Assessment Categories
We evaluate your incident response readiness across four critical domains
IR Plan & Documentation (35% of score)
Documented IR plan, incident classification, containment procedures, communication templates, escalation procedures, and plan currency
Team & Resources (30% of score)
IR team roles, 24/7 availability, forensics capabilities, external partners, legal counsel, and resource adequacy
Testing & Drills (25% of score)
Tabletop exercises, IR drill frequency, lessons learned process, plan updates, and testing realism
Communication (10% of score)
Stakeholder notification, media response, customer communication, regulatory reporting, and executive briefing procedures
Why This Assessment Is Different
Based on Real IR Failures
Questions derived from actual botched incident responses that turned minor incidents into catastrophic breaches
Practice Over Theory
We measure whether you've actually tested your plan - untested plans fail under pressure
Brutally Honest Results
Having a plan you've never tested is the same as having no plan. We'll tell you the truth.
Let's Build Your Incident Response Plan
Talk to Craig about your IR assessment and develop tested procedures that work under pressure.
(•••) •••-••••
No sales pitch • Honest assessment • 35+ years successfully running IT and security for businesses