This session looks into how a large Healthcare provider (Encompass Health) developed actionable tactics, techniques and procedures from their Information Technology Incident Response Plan to successfully operate a small internal response team 24/7 with the support of a managed security services provider.

We will dive into details on how we applied an objective decision matrix to standardize response actions across the response team members and the MSSP. Then we will discuss some methods used to continually evaluate and improve the overall Incident Response process.

Learning Objective:

Develop an executable strategy within your Incident Response Plan

IR process improvement and keeping pace with the threats

Mitch Thomas, Chief Security Officer Encompass Health