Applying Modular Design to Maintain IR Playbooks at Scale
Source: YouTube · SANS Digital Forensics and Incident Response · published Aug 15, 2025 · 32:14
This video discusses strategies for effectively managing incident response playbooks at scale, drawing on Jessica Gorman's research from Georgetown University and her decade of experience in the defense industry.
Key Takeaways:
• The speaker, Jessica Gorman, introduces the topic of scaling incident response playbooks, referencing her role at Experian and her master's capstone research 0:01
• Managing playbooks at scale requires leveraging both academic research on cyber security risk management and practical industry experience 0:20
• The goal is to provide attendees with real-world concepts and actionable strategies to improve the management and effectiveness of security operations 0:44
Mastering the scalability of incident response is critical for maintaining robust security postures in modern organizations.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Incident Response. Commonly maps to: Security Operations, Security Assessment and Testing. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
So hello everyone. I am Jessica Gorman and I'm here to talk to you today about incident response playbooks and how to manage them at scale more effectively. Um so I'm currently the senior director of security operations and incident response at an organization called Experian. But the topic we're going to be talking about today is really based off of um research I conducted through my master's capstone at Georgetown University in their cyber security risk management program. So uh as we talk about managing these playbooks at scale, we you know I'm drawing upon that research as well as my my own previous experiences in in the defer industry for the past decade. So today my goal is really to um have you all be able to take away some real world uh concepts that can be used to applying modular…