Scribd
Upload
12 views4 pages

IR and BC Advisory

The document outlines a service offering for developing and maintaining an Incident Response Plan (IRP) and Business Continuity Management System (BCMS) in accordance with relevant ISO and NIST standards. It includes activities such as risk assessments, incident handling procedures, training, and ongoing support to ensure organizational resilience against cyber threats. The service is led by an experienced professional with a strong background in cybersecurity and compliance auditing.

Uploaded by

d.baudone
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
12 views4 pages

IR and BC Advisory

The document outlines a service offering for developing and maintaining an Incident Response Plan (IRP) and Business Continuity Management System (BCMS) in accordance with relevant ISO and NIST standards. It includes activities such as risk assessments, incident handling procedures, training, and ongoing support to ensure organizational resilience against cyber threats. The service is led by an experienced professional with a strong background in cybersecurity and compliance auditing.

Uploaded by

d.baudone
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 4

IR and BC Advisory Building and maintaining a robust Incident

Response Plan (IRP) and Business Continuity


Management System (BCMS)

The service includes:

● Assistance in designing and maintaining an Business


Continuity Program and in accordance with ISO 22301
and NIST SP 800-34
● Assistance in evaluating and managing risks and
business impacts
● Assistance in designing and maintaining an IRP in
accordance with NIST SP-800-61, ISO 27001 - 27035
● Remote support and on demand advice and guidance
on management of the BCP and IRP as needed
The expertise as-a-service will help you prepare ● Gap analysis reports
a prompt response to cyber incidents, ensure ● Review of the gap analysis reports
● Tabletop exercise and simulation
your business continuity, strengthen resilience
and responsiveness to cyber threats and meet
NIS2 regulatory requirements
Activities included in the service - Incident Response
● RP Development & Implementation
○ Design and implement a customized Incident Response Plan (IRP) aligned with NIST SP
800-61, ISO 27001, and ISO 27035.
○ Establish roles and responsibilities for your Incident Response Team (IRT).
○ Develop clear incident handling procedures and communication protocols.
○ Integrate IRP with your existing BCMS and other cybersecurity frameworks

● IRP Maintenance & Optimization


○ Reviews and updates of existing IRP to ensure ongoing effectiveness Information gathering
○ Gap analysis and remediation for evolving risks and business changes and analysis
○ Post-incident reviews and lessons-learned sessions for continuous Plan development and
improvement design
I
○ Updates and enhancements based on emerging threats and evolving Implementation
regulatory requirements R
Testing P
● IRP Testing & Ongoing Support/Advisory
○ Remote support and on-demand guidance for managing incidents. Maintenance and
○ Reviews and gap analysis reports to ensure IRP effectiveness. updating
○ Tabletop and incident simulation exercises to validate the robustness of the
IRP and evaluate response readiness.
Activities included in the service - Business Continuity
● BCMS Implementation
○ Design and develop a customized BCMS aligned with ISO 22301 and NIST SP 800-34.
○ Business impact analysis (BIA) and risk assessments.
○ Create and document business continuity plans (BCPs).
○ Develop communication strategies and crisis management protocols.
○ Training and awareness programs for staff

● BCMS Maintenance & Audit Support


○ Reviews and updates of existing BCP to ensure ongoing effectiveness Information gathering
○ Gap analysis and remediation for evolving risks and business changes and analysis
○ Preparation and support for certification body audits (ISO 22301) Plan development and
○ Continuous improvement initiatives and compliance monitoring design
B
Implementation
C
● Targeted activities and specialized support for key BCMS activities M
○ Business impact analysis (BIA) and risk assessments Testing S
○ Testing and Validation: Plan and execute business continuity tests,
including tabletop exercises and full-scale simulations Maintenance and
updating
○ Crisis Management Drills: Develop and conduct crisis management
exercises tailored to your organization’s risk profile
○ Simulation of specific disruption scenarios to enhance preparedness.
Daniele Baudone ❏ M.S. in Computer Science from Pisa
University, I have participated in business
start-ups and collaborated with consulting
firms and companies, as Business Unit
Director, Cyber Security Consultant, Chief
Information Security Officer, GRC Director

❏ I have started and managed ICT security


teams in multinational cloud SaaS
companies, ensuring effective information
security management that has successfully
supported their objectives and growth

❏ Consolidated experience in consulting and


providing solutions for cyber security and in
the ICT field

I support organizations in enhancing their ❏ Auditor / Lead Auditor ISO 27001:2022,


operational reliability and information security ISO 22301:2019, ISO 42001:2023
posture to align security strategies with
business demands, empowering enterprise
growth and innovation

You might also like