Information Security Handbook

Decision (OODA) tools

Decision tools allow you to ensure that you have repeatable, methodical, and trustworthy processes as it relates to your incident response capability. These tools allow you to take the triaged threat information from your observation and orientation tools and make an appropriate risk-based decision to protect your organization.

Unlike the other tools we have discussed so far, decision tools are not something you can simply download and start running against your information system. Decision tools are the policies, procedures, and plans that you put together as part of your information security and incident response programs. While there are great places on the internet to grab samples, you will quickly find that they ...