Prevent / verify
Make every control provable.
A security baseline becomes useful when a person owns it, its scope is clear, and there is evidence that it works.
Defensive guide · Sources includedKeep this within reach
The field manual
Start with prevention. Rehearse coordination. Carry the evidence into your next decision.
Prepare / coordinate
Prepare the first page of your incident plan.
Before an incident, decide who can act, how the team will communicate, and what information the next person needs.
Defensive guide · Sources includedThese are planning and educational guides. For an active incident, use your organization’s authorized response process.