Financial Services Incident Response Preparation Plan
Budget: ₹600 – ₹1,500 INR
I’m putting together the preparation-stage artefacts of an Incident Response Lifecycle for a growing financial-services firm and need an experienced hand to create a polished, audit-ready package. The work must clearly demonstrate the learning objectives around risk-informed decision-making, swift detection and analysis, and well-governed containment planning (LO2, LO3, LO4) while centring on an open-source toolset—specifically Wireshark—for all network-focused evidence.
What I’m after is a cohesive set of documents and practical files that prove we’re ready before the next breach attempt lands:
• An Incident Response policy that assigns roles, escalation paths, and authority levels, mapped to NIST 800-61/ISO 27035.
• A scenario-driven playbook (phishing, insider data exfiltration, malware on a trading workstation) showing exactly how we move from initial alert to analysis and hand-off for containment.
• Baseline packet captures with Wireshark, accompanied by a concise narrative explaining the filters, statistics, and heuristics you used to surface anomalies relevant to banking traffic.
• A lightweight asset & data-flow inventory, prioritised by business impact, so our responders know where to focus first.
• A briefing deck or quick-reference sheet that the SOC can use for tabletop exercises, illustrating how your detection and analysis steps fulfil the stated learning outcomes.
Acceptance criteria
1. Editable source files (DOCX/Markdown) plus polished PDFs.
2. Wireshark .pcap evidence and a short narrated screencast (<10 min) walking through key detection moments.
3. Each recommendation tied to at least one recognised framework or reference (MITRE ATT&CK, OWASP, NIST).
4. Material ready for an internal tabletop test without further re-work.
If this aligns with your skills, send me a brief outline of your approach and timeline so we can get started.
What I’m after is a cohesive set of documents and practical files that prove we’re ready before the next breach attempt lands:
• An Incident Response policy that assigns roles, escalation paths, and authority levels, mapped to NIST 800-61/ISO 27035.
• A scenario-driven playbook (phishing, insider data exfiltration, malware on a trading workstation) showing exactly how we move from initial alert to analysis and hand-off for containment.
• Baseline packet captures with Wireshark, accompanied by a concise narrative explaining the filters, statistics, and heuristics you used to surface anomalies relevant to banking traffic.
• A lightweight asset & data-flow inventory, prioritised by business impact, so our responders know where to focus first.
• A briefing deck or quick-reference sheet that the SOC can use for tabletop exercises, illustrating how your detection and analysis steps fulfil the stated learning outcomes.
Acceptance criteria
1. Editable source files (DOCX/Markdown) plus polished PDFs.
2. Wireshark .pcap evidence and a short narrated screencast (<10 min) walking through key detection moments.
3. Each recommendation tied to at least one recognised framework or reference (MITRE ATT&CK, OWASP, NIST).
4. Material ready for an internal tabletop test without further re-work.
If this aligns with your skills, send me a brief outline of your approach and timeline so we can get started.