Topic: The Complete Incident Response Playbook: Building Business Resilience
Abstract: A cyber incident is no longer simply a technical problem. When response is slow, disorganized, or disconnected from business priorities, the consequences extend well beyond the IT environment into operations, customer trust, regulatory exposure, and financial performance. The organizations that recover fastest are not necessarily those with the most sophisticated tools, but those with the most structured, well-practiced, and business-aligned response capabilities.
This webinar, part of ‘The Complete IR Playbook’ series, provides a practical framework for building an incident response playbook that is structured, repeatable, and aligned with the full scope of organizational risk. It covers the complete incident response lifecycle from preparation and detection through containment, eradication, recovery, and post-incident review, and examines how to establish the roles, escalation paths, communication protocols, and cross-functional coordination that effective response demands.
The session also addresses how organizations can measure and continuously improve their incident response capability through meaningful metrics, tabletop exercises, and lessons learned. Attendees will leave with a clear understanding of how to connect incident response with business continuity, crisis management, and enterprise risk management to build the resilience that modern organizations require.
Key Takeaways:
- A clear understanding of the incident response lifecycle and how each phase contributes to effective recovery
- How to design and document a structured, repeatable incident response playbook suited to the organization’s risk profile
- The importance of aligning incident response with business continuity, crisis management, and enterprise risk management frameworks
- How to build effective coordination between SOC, IT, legal, compliance, privacy, communications, and executive leadership during an incident
- How to define, track, and use incident response metrics and KPIs to assess and improve organizational readiness
- How post-incident reviews and lessons learned can drive meaningful, sustained improvement in incident response capability
Speaker:
Eder Ribeiro, Director, Global Incident Response, TransUnion
Bio: Eder is a founding member and leader of CyberScout’s (A TransUnion Company) Incident Response Forensics (IRF) team. The IRF team focuses on Digital Forensics Incident Response services to the insurance market and law firms. Eder and his team support IRF operations in the US, Canada, Australia, and select jurisdictions in Europe and Latin America. Eder also leads the US breach notification/fulfillment team, which is part of TransUnion’s uniquely holistic approach to cyber. Eder has a background in cybersecurity, privacy, incident response, and leadership. Prior to joining TransUnion, Eder earned a Juris Doctor with a focus on privacy, compliance, contracts, and corporate law from Roger Williams University School of Law. Eder also earned a Master of Science degree in Cybersecurity from Roger Williams University. Eder has served and continues to serve as a Non-Commissioned Officer in the Rhode Island Army National Guard for 20 years, including a tour of duty in the Kandahar province, Afghanistan, in support of Operation Enduring Freedom.
