Incident Response Playbook Generator

Generate NIST SP 800-61 compliant incident response playbooks from incident inputs.

6|Updated Oct 25, 2025
One-click install
npx skills add https://github.com/williamzujkowski/cognitive-toolworks --skill incident-response-playbook-generator
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Incident Response Playbook Generator
Source: https://github.com/williamzujkowski/cognitive-toolworks/tree/main/skills/resilience-incident-generator
Command: npx skills add https://github.com/williamzujkowski/cognitive-toolworks --skill incident-response-playbook-generator

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the creation of structured incident response playbooks that align with the NIST SP 800-61 lifecycle, ensuring consistent preparedness and response. It reduces cycle times for incident planning and helps teams document decisions, roles, and comms in a reproducible format.

Core Features & Use Cases

  • Template-driven playbooks for security incidents, outages, and disaster recovery.
  • Service-context integration to tailor runbooks, escalation plans, and post-mortem templates to your environment.
  • Compliance mapping and documentation support for HIPAA, PCI-DSS, SOC2, and FedRAMP.

Quick Start

Prompt the generator with incident_type, severity_level, and service_context to produce a compliant playbook.

Frequently Asked Questions about Incident Response Playbook Generator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate an incident response playbook that aligns with NIST SP 800-61?

The generator automates NIST SP 800-61 incident response playbook creation by mapping inputs like incident type, severity level, and service context into phased playbooks with escalation matrices, runbooks, and post-mortem templates.

What is included in a NIST 800-61 compliant incident response playbook?

A NIST 800-61 compliant incident response playbook includes phased response actions, escalation matrices, detailed runbooks, and post-mortem templates tailored to your specific service context and incident severity.

Can I create incident response playbooks for data breaches and disaster recovery?

Yes, you can create incident response playbooks for data breaches, disaster recovery, security incidents, and outages. The generator applies NIST SP 800-61 lifecycle principles to each scenario.

Does the incident response playbook generator support HIPAA and PCI-DSS compliance mapping?

Yes, the incident response playbook generator supports compliance mapping and documentation for HIPAA, PCI-DSS, SOC2, and FedRAMP requirements within the generated playbooks.

What inputs do I need to provide to automate incident response playbook generation?

You need to provide the incident type, severity level, and service context to automate incident response playbook generation. These inputs map to T1 templates and T2 detailed playbooks.

What is the difference between T1 templates and T2 detailed playbooks?

T1 templates provide baseline incident response structures, while T2 detailed playbooks offer comprehensive, service-context tailored runbooks, escalation plans, and post-mortem templates for specific incident scenarios.