incident-response-playbook-creator

Incident response playbooks are step-by-step guides for detecting, responding to, and recovering from security incidents. This Skill generates customized Markdown playbooks for 11 scenarios—ransomware, data breach, phishing, AI/ML incidents, supply chain, container, IoT/OT, cloud, API, insider threat, and DDoS—based on NIST SP 800-61r3 and CISA guidance, tailored to your industry, organization size, and regulatory requirements.

Yes. The playbooks include GDPR and HIPAA breach-notification guidance, detection indicators, response and recovery procedures, communication templates, escalation paths, and role definitions aligned with CSF 2.0 to meet regulatory compliance obligations across incident scenarios.

Playbooks are generated as Markdown files containing structured detection indicators, response procedures, recovery steps, communication templates, escalation paths, and role definitions. Optional PDF or HTML output is available through additional tooling.

Yes. The Skill generates playbooks customized by organization size, industry type, and regulatory requirements. You provide these inputs during the interactive prompts, and the tool applies them across all 11 incident scenarios to produce relevant, context-specific guidance.

The Skill uses Jinja2 for templating, Markdown for output formatting, and PyYAML for configuration parsing. These tools enable dynamic playbook generation from trusted templates and regulatory frameworks.

Yes. All generated playbooks include CSF 2.0 alignment, mapping incident response procedures to framework functions so your response actions support your broader cybersecurity governance and compliance posture.