counteractive/incident-response-plan-template

A concise, directive, specific, flexible, and free incident response plan template

incident-response-plan-template's Issues

Add prerequisites section for building using make

Make it clear that you need make, mustache, and pandoc to run the Makefile (and perhaps even explain what make does under the hood).

Consider including advice from the Sep 2020 Joint CSA IR advisory

Here: joint-csa-ir-advisory-200908.pdf

Demand for ransomware playbook

Teams are very interested in an actionable ransomware playbook. One quote from the community: "[security and IT teams] are looking for something to provide users, help desk folks, technicians and such on what actions to take if (when) they experience a ransomware attack." This situation is so prevalent, the default plan should include a detailed, actionable ransomware playbook.

Recommend including in the playbook example "reference card" content for users and help desk personnel, non-security-team folks, that can be used in internal communications content.

Default target for makefile should build all formats

Currently only builds html.