{
  "docId": "019dd923-5e88-73ef-bd57-cf13ce8ed1d4",
  "docSlug": "72b88f635783ce33",
  "documentTitle": "incident response insights january 2025",
  "authorId": "BoozAllenHamilton",
  "authorName": "Booz Allen",
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "strategy_consulting",
  "sourceTypeLabel": "Strategy consulting",
  "presentationDate": null,
  "orientation": "landscape",
  "aspectRatio": 1.778,
  "pageNumber": 7,
  "pageCount": 10,
  "prevPage": 6,
  "nextPage": 8,
  "slideType": "initiative_list",
  "function": "present_solution",
  "density": "balanced",
  "nDataPoints": 0,
  "notes": "Part of a series; continues from a previous slide covering controls #1-5.",
  "elementsJson": [
    "bullet_list"
  ],
  "metadataConfidence": 1,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5e88-73ef-bd57-cf13ce8ed1d4/7",
  "deckHref": "/decks/019dd923-5e88-73ef-bd57-cf13ce8ed1d4",
  "deckJsonHref": "/decks/019dd923-5e88-73ef-bd57-cf13ce8ed1d4.json",
  "deckAnchorHref": "/decks/019dd923-5e88-73ef-bd57-cf13ce8ed1d4#slide-7",
  "components": [
    {
      "bbox": {
        "h": 0.35,
        "w": 0.35,
        "x": 0.2,
        "y": 0.08
      },
      "kind": "list",
      "text": "6) Password and End-User Account Management: Emphasizes active user management, strong password policies, and group privilege control.",
      "attrs": null,
      "subkind": "bullet",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "2858fa6e-626c-420e-8836-a0b8cd87af0c",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.35,
        "w": 0.35,
        "x": 0.6,
        "y": 0.5
      },
      "kind": "list",
      "text": "8) Backups: Advises on both onsite and offsite storage to protect against encryption or deletion by threat actors.",
      "attrs": null,
      "subkind": "bullet",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "3bf51c8f-e031-4f48-b152-61e66eccee39",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.35,
        "w": 0.35,
        "x": 0.2,
        "y": 0.6
      },
      "kind": "list",
      "text": "7) Event Logging: Recommends SIEM solutions, proper log preservation, and recording detailed session information.",
      "attrs": null,
      "subkind": "bullet",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "5a309067-caa4-4527-91ee-2272afac6d0f",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.2,
        "w": 0.15,
        "x": 0.02,
        "y": 0.18
      },
      "kind": "paragraph",
      "text": "IR Update Summary: Read on for a summary of our Incident Response team's recent observations alongside insights from across the cybersecurity community.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "16760fd3-e02f-4b68-89fa-50495cb09b5a",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.05,
        "w": 0.4,
        "x": 0.2,
        "y": 0.03
      },
      "kind": "title",
      "text": "Underwriting Focus Area – Top 10 Security Controls - #6 to #10",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "2a59b1c0-241c-4dda-9ebf-507d8f6573e5",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [],
  "frameworks": [],
  "arcBeats": [
    {
      "to": 8,
      "from": 7,
      "beatId": "bd27ea9a-e6f5-4654-85e4-0ef70838c072",
      "arcName": "The Sparkline",
      "arcSlug": "sparkline",
      "beatName": "Solution & Approach",
      "beatSlug": "consultants-gambit-solution-approach",
      "evidence": "Slides 7-8 list underwriting focus areas – top 10 security controls",
      "position": 3,
      "confidence": 0.8,
      "parentBeatName": "Turn",
      "parentBeatSlug": "turn"
    }
  ],
  "loops": [
    {
      "to": 8,
      "from": 7,
      "name": "Quick Win Big Bet",
      "slug": "47-quick-win-big-bet",
      "bestFor": "Transformation planning, 100-day plans, resource allocation",
      "matchId": "3e012379-c218-4e95-9b42-73de08e48d72",
      "evidence": "Slides 7-8 list underwriting focus areas – top 10 security controls",
      "position": 2,
      "objective": "Identify top security controls for underwriting focus",
      "structure": "The Full List -> Quick Wins (Low effort, High impact) -> Big Bets (High effort, High impact) -> Sequenced Roadmap",
      "confidence": 0.6,
      "description": "Separate initiatives into immediate wins and longer-term strategic bets"
    }
  ],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}