CISO Incident Response Orchestration
Orchestrate incident response with compliance-aware decision trees and templates
What You Can Do
You receive structured guidance through every phase of a security incident—from initial assessment and severity classification through escalation decisions, stakeholder notifications, and post-incident review. The skill maps your incident to regulatory requirements (HIPAA, PCI-DSS, SOC 2, GDPR), generates ready-to-use communication templates tailored to your stakeholders, and provides decision trees that help you prioritize response actions under pressure.
Features
Classify incidents by impact and urgency using industry-standard frameworks
Automatically identify which regulations (HIPAA, PCI-DSS, GDPR, SOC 2) apply to your incident
Interactive workflows that determine who needs to be notified and when based on incident type and severity
Pre-drafted, legally-vetted templates for board notifications, regulatory filings, and customer alerts
Generate timestamped incident response records for compliance audits and legal discovery
Structured approach to determining business function restoration priority
Guided root cause analysis and lessons-learned capture for future preparedness
Example Output
Incident Assessment Output
Incident ID: INC-2024-0847
Initial Classification: Confirmed breach (customer data exposed)
Severity: CRITICAL
Regulatory Trigger: GDPR Article 33, HIPAA Breach Notification Rule, California Consumer Privacy Act
Notification Deadline: 72 hours (GDPR), 60 days (HIPAA), 30 days (CCPA)
Escalation Decision Output
✓ Notify CEO immediately
✓ Engage legal counsel
✓ Alert cyber insurance carrier
✓ Prepare regulatory notification (GDPR)
✓ Schedule all-hands employee communication
✗ No press statement needed at this stage
Communication Template (Board Notification)
To: Board of Directors
Subject: URGENT: Security Incident Response — Customer Data Exposure
We are managing an active security incident involving unauthorized access to customer payment data. All systems have been secured. External forensics firm engaged. Regulatory notifications proceeding per legal guidance. Full briefing in 2 hours.
What's Included
- SKILL.md: Complete incident response orchestration workflow
- Incident Assessment Template: Severity classification matrix and impact assessment checklist
- Regulatory Requirements Matrix: Compliance triggers and notification timelines for GDPR, HIPAA, PCI-DSS, SOC 2, and state privacy laws
- Escalation Decision Trees: Visual workflows for notification prioritization
- Communication Templates: Board notifications, customer alerts, employee announcements, regulatory filings
- Incident Log Format: Timestamped response record for audit compliance
- Post-Incident Review Checklist: Root cause analysis and lessons-learned framework
Who It's For
- Chief Information Security Officers (CISOs) — Need rapid, compliant incident orchestration under pressure
- Security Incident Response Managers — Lead cross-functional response coordination
- Security Operations Center (SOC) Directors — Triage and escalate incidents to executive leadership
- Compliance Officers — Ensure regulatory notification and documentation requirements are met
- Enterprise Security Leaders — Establish incident response playbooks and escalation procedures
Best For
- Immediate incident triage and severity classification — Determine if you have a reportable incident and how critical it is
- Executive escalation decisions — Know exactly who to notify and when
- Regulatory compliance notification — Meet GDPR, HIPAA, PCI-DSS, and state privacy law timelines
- Crisis communication planning — Draft notifications to board, employees, customers, and regulators
- Post-incident root cause analysis and recovery — Structured review to prevent future incidents
You might also like
This skill evaluates industrial real estate deals by analyzing property fundamentals, comparable market data, risk factors, and investment metrics. You get detailed assessments of deal viability, market positioning, and potential returns—all structured to support your investment thesis with hard data. Whether you're analyzing a single property or comparing multiple deals, you'll receive an executive summary with a clear buy/hold/pass recommendation.
by nakano1122
You systematically analyze multi-layered enterprise architectures, identify critical trade-offs across scalability, cost, and risk, and generate documented decisions that align technical choices with business strategy. This skill produces comprehensive architecture reviews that expose hidden dependencies, quantify implementation trade-offs, and deliver prioritized, actionable recommendations backed by formal Architecture Decision Records.
by nakano1122
You can leverage Claude to conduct thorough code reviews, evaluate code quality, identify architectural issues, and provide actionable feedback to your frontend engineers. This skill helps you standardize code review practices across your team, catch bugs before production, and maintain consistent quality standards while scaling your engineering capacity.
by nakano1122
You get a structured decision-making framework tailored to scale-ups navigating rapid growth. Claude helps you evaluate technical architecture choices, plan team scaling with hiring rubrics, prioritize technical debt against velocity demands, and craft engineering strategy communications for leadership. The framework balances short-term velocity with long-term maintainability.
by nakano1122
This skill transforms complex lease agreements into clear, actionable analysis. It evaluates terms against market benchmarks, identifies negotiation leverage points, and generates professional recommendation letters that strengthen your position in lease discussions.
by nakano1122
Upload or paste office lease documents and market data, and this skill analyzes every term—from base rent to escalation clauses—to identify financial risks, flag unfavorable conditions, and generate tailored negotiation strategies backed by market comparables. You'll get a detailed risk assessment, cost-benefit breakdown, and a step-by-step negotiation playbook that strengthens your position at the bargaining table.
by nakano1122
You conduct systematic architecture reviews that identify technical risks, quantify their business impact, and prioritize technical debt for remediation. The framework generates risk matrices, compliance gap analyses, and actionable roadmaps with effort estimates—ideal for due diligence, modernization planning, or governance decision-making. You produce executive summaries that translate technical findings into business language for stakeholder alignment.
by nakano1122
This skill helps you analyze properties systematically, generate accurate comparative market analyses (CMAs), and develop tailored negotiation strategies that give you the edge in competitive markets. You receive data-driven valuations backed by comparable sales, neighborhood trends, and property-specific factors. With built-in negotiation frameworks and offer positioning strategies, you confidently identify leverage points and market conditions to close deals at the best possible price.
by nakano1122