A Prototype Tool for Incident Response Readiness Assessment
摘要
Organizations face continual threats from cyberattacks, and handling these incidents remains a significant challenge. Effective incident response (IR) is consequently critical to ensure business continuity and operational resilience. Despite the importance of IR, organizations are often not well-prepared to respond. Therefore, organizations need to understand their incident response readiness status and identify gaps therein to enhance their response capabilities. This paper presents a prototype of Incident Response-Readiness Self-Assessment Tool (IRRSAT) for evaluating organizational IR readiness, addressing the limitations of existing assessment models that typically focus on general security maturity rather than specific IR capabilities. The IRRSAT is built upon a validated framework that incorporates human, organizational, operational and external dimensions, utilizing Design Science Research (DSR) methodology. The proposed platform features interactive dashboards, customizable assessment forms, and comparative analytics, offering both descriptive assessment and prescriptive guidance for systematic improvement of IR preparedness.