IR
Incident Report
X
by ximenaleppalaOne report read cold, as the reviewer who signs it off reads it: the timeline checked for completeness, the root cause checked for whether it is a cause or a symptom, every action item checked for an owner and a date, and the impact checked for whether it is quantified. Root cause: "the database ran out of connections." That is what happened, not why. Priced per report, one payment, nothing recurring.
29
1
9d agoGA
GELECEK Agency
AT
by Ahmet Zeki TekçeAvrupa’nın en iyisi
26
58
7mo agoTM
Threat Model
V
by verlalorinczOne threat model read cold, as the reviewer signing it off reads it: every threat checked for a disposition, every asset and boundary checked for whether threats were raised against it, and the diagram read against the system you actually built. Fourteen threats enumerated. Eleven have a mitigation. The other three just stop. Priced per model, one payment, nothing recurring.
22
2
27d agoVQ
Vendor Questionnaire
E
by ezellbuchwaldOne questionnaire read cold, as the buyer’s assessor reads it: every claimed control checked for whether its evidence is present, the answers checked for consistency with each other and the attachments, each answer checked for whether it is in scope, and the whole checked for overclaim. The answer is "Yes." The assessor cannot score a yes with nothing behind it, so it becomes a follow-up — or a fail. Priced per questionnaire, one payment, nothing recurring.
3
5d ago