The use of playbooks in the incident response process

Playbooks are a promising tool for incident response personnel. However, where to start? What resources are available, and what is the best way to use them? Playbooks offer a guiding thread in stressful response situations and can improve the technical and organizational quality of procedures. So, let us look at the use of playbooks within the incident response process. An analysis of four existing, publicly available incident response playbooks demonstrates state of the art. The discussion of the surrounding processes for creation, validation, and training, provides an introduction to how to use incident response playbooks. A survey approach is a great way to create playbooks for incident response by directly engaging relevant stakeholders.