ADR - Cybersecurity Analysis, Detection and Response
With a high risk appetite, good response capability
Domain Description
Domain that establishes the capabilities for continuous monitoring, proactive threat detection and structured response to security incidents. It includes controls for vulnerability management, identification and remediation, retention and monitoring of activity logs, and the formal handling of cybersecurity events and incidents through playbooks and response plans. It integrates SIEM, threat intelligence, threat hunting and digital forensics capabilities.
ADR Controls
Continuous monitoring, proactive threat detection and structured response to security incidents.
ADR-1
ADR-2
ADR-3
ADR-4
Common problems in companies
They've never been attacked and don't see handling security incidents as a priority. They really are still too small.
Storing information and logs indefinitely for no purpose.
They don't mitigate vulnerabilities, they only build new features.
ROI (Return on Investment)
For companies
Store and process only what's necessary, budget optimization.
Know what risks and vulnerabilities the business has.
The risk may be high, but good response capability can make the difference.
For cybersecurity professionals
Know what to do in the event of an IT security incident.
Coordinate, implement and improve your teams' response capability.
Mitigate vulnerabilities at scale.