Planning portfolio
Incident response planning portfolio
April 2026.
A practical incident response planning portfolio structured around NIST SP 800-61.
It is a sanitised mock-up of an incident response program and plan, based on an earlier planning document of mine. Names, organisations and contacts are fictional or replaced with placeholders.
What it covers
- Response roles and the project team
- Communications and escalation
- Evidence handling
- Recovery and post-incident review
A 28-page portfolio document, not a live customer programme.
More projects
- Ask the Atlas: an interactive questionnaire over the knowledge base Interactive capstone, October 2026
- The Offerings Atlas: mapping what 166 AI platforms cover, and what they don't Knowledge base case study, October 2026
- A local gateway for headless Claude and Codex Personal tooling, October 2026
- Building a governed AI agent on an open knowledge base Agent build case study, September 2026
- Runner: Claude study game Study game, July to September 2026
- Securing Claude Cowork: controls, gaps and safer defaults Practitioner reference, Version 1.4
- Human, script or AI? Spotting AI-driven attacks in the SOC SOC advisory white paper, Version 5
- AI and MCP access governance Portfolio proof of concept, May to July 2026
- RESYNTH research pipeline Open-source tool, First released June 2026
- AWS security architecture case study Fictional case study, April 2026