Generating internal threat intelligence feed as well as creating an incident response playbook

These days, there is growing concern about the security of confidential data in organizations. There is no doubt
that organizations with high-security measures will witness cyberattacks. Therefore, the question is how we can
prepare our infrastructure and cybersecurity team to deal with these challenges. The incidents response playbook
is a comprehensive plan which has been prepared with a clear understanding of the detection & analysis process,
team responsibility, and recovery plan. The Playbook will help the organization take urgent steps and action in
time to prevent deleterious effects on sensitive and confidential data and infrastructure. In addition, we need to
evaluate our infrastructure based on real threats. By feeding an appropriate threat intelligence into our current
security controls, we can ensure that our security measures have high performance in dealing with threat actors,
and if there are any bugs and gaps, we can find them before they bring about data breaches.

Faculty Supervisor:

Charlie Obimbo

Student:

Partner:

GlassHouse Systems

Discipline:

Computer science

Sector:

Manufacturing; Professional, scientific and technical services

University:

University of Guelph

Program: