This request for comment proposes Cyber Incident Orchestration Platform, or CIOP, as a distinct software category and invites feedback from cybersecurity, technology, legal, insurance, consulting and resilience stakeholders. Existing categories support pieces of this work. Individually, they do not provide the cyber-specialized command environment required to manage a consequential incident as one enterprise event. A Cyber Incident Orchestration Platform fills that gap.

In our forensics work, drawing a timeline of events to understand the sequence, challenge stakeholders on their version of the story or...

Here are some awesome news from the DFIR and offensive security trenches. In case you haven’t tried yet, the Windows Subsystem for Linux...