-
Notifications
You must be signed in to change notification settings - Fork 12
RBA triage/investigation #29
Unanswered
ZachTheSplunker
asked this question in
Q&A
Question from "The Office" Hours meetup
Is there any written guidance on how to triage/investigate a risk notable, vs. a traditional notable?
All reactions
Replies: 1 comment
Answer from "The Office" Hours meetup
TLDR: no.
If you don't know where to start, start with the known risk frameworks, such as MITRE.
If you have a well-documented incident response plan, it will instruct your RBA approach.
NOTE: watch for RBA academy announcement in 2023
All reactions
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment