Free Interactive Planning Tools
Make a useful planning decision now. No account, card, or download required.
Incident Response Framework Comparison
Compare NIST SP 800-61 Rev. 3, SANS PICERL, ISO 27035, and the CISA playbook.
IR Framework Fit FinderBuild an Incident Response Team
Identify cross-functional response functions, participants, backups, and specialists.
IR Team Blueprint BuilderRegulatory Clock Cost Calculator
Explore the potential exposure created by missed cyber reporting deadlines.
Interactive toolFoundations
Start here if you're building or reviewing an IR program.
What is Incident Response?
Definition, lifecycle, phases, and key roles.
What is CIRM?
Cyber Incident Response Management category explained.
Incident Response Plan Template
Build a plan aligned to NIST 800-61 or ISO 27035.
IR Team Roles
Commander, Legal, Comms, Tech Lead, and more.
Incident Command System (Cyber)
Apply ICS to cyber incidents - roles and chain of command.
CISO's Guide to IR
Strategy, board reporting, and metrics for security leaders.
Frameworks & Standards
NIST, ISO, and the major standards every IR program should map to.
NIST SP 800-61 Rev. 3
What changed from Rev. 2 and how incident response maps to CSF 2.0.
NIST Cybersecurity Framework (CSF 2.0)
How CSF 2.0's six functions tie into IR.
ISO 27035 Incident Management
International standard for IR - complete implementation guide.
IR Statistics & Benchmarks
Time to detect, time to contain, cost of delay.
IR Metrics That Matter
MTTD, MTTC, MTTR, and board-level metrics.
Defensible Incident Record
Hash-chained ledgers and FRE 901-admissible evidence.
Compliance & Regulatory
Every major breach notification deadline, templates, and regulator requirements.
Breach Notification Requirements
Complete US state, federal, and international deadlines.
GDPR 72-Hour Notification Template
Article 33 ready-to-send template.
HIPAA Breach Notification Guide
The 60-day rule explained with edge cases.
Cybersecurity Compliance Guide
Overview of major frameworks and regulations.
Security Audit Guide
Audit types, process, and preparation.
Incident Types
Deep-dive response guides for the incident types you're most likely to see.
What is a Data Breach?
Causes, costs, and response guide.
What is a Security Breach?
Types, examples, and response steps.
Ransomware Response Checklist
First 24 hours of a ransomware incident.
Ransomware Recovery
Step-by-step restoration and hardening.
Ransomware Response Plan
Build a ready-to-execute ransomware playbook.
Ransomware Protection
Prevention, detection, and response prep.
Insider Threat Response
Malicious, negligent, and compromised insiders.
Exercises & Readiness
Tabletop scenarios, drills, and after-action templates.
Operations & Platforms
Software, retainers, DFIR, and insurance - the operational side of IR.
Incident Response Software
Evaluation criteria and platform comparison.
Incident Management Platform
What to look for in 2026.
IR Retainer Guide
When and how to engage an IR retainer firm.
DFIR Guide
Digital forensics and incident response integration.
Cyber Insurance + IR
Carrier-first reporting, panel vendors, coverage.
AI in Incident Response
How AI augments (not replaces) IR teams.
Vulnerability Assessment
Identify and prioritize security gaps.
Business Continuity
How IR connects to disaster recovery, business continuity, and enterprise risk.
Want a plan without reading 36 guides?
IR-OS generates a full, regulator-mapped incident response plan in 15 minutes. No blank page, no 6-week consulting project.
Start Your 7-Day Free Trial →