CISO Incident Response Orchestration
Orchestrate incident response with compliance-aware decision trees and templates
What You Can Do
You receive structured guidance through every phase of a security incident—from initial assessment and severity classification through escalation decisions, stakeholder notifications, and post-incident review. The skill maps your incident to regulatory requirements (HIPAA, PCI-DSS, SOC 2, GDPR), generates ready-to-use communication templates tailored to your stakeholders, and provides decision trees that help you prioritize response actions under pressure.
Features
Classify incidents by impact and urgency using industry-standard frameworks
Automatically identify which regulations (HIPAA, PCI-DSS, GDPR, SOC 2) apply to your incident
Interactive workflows that determine who needs to be notified and when based on incident type and severity
Pre-drafted, legally-vetted templates for board notifications, regulatory filings, and customer alerts
Generate timestamped incident response records for compliance audits and legal discovery
Structured approach to determining business function restoration priority
Guided root cause analysis and lessons-learned capture for future preparedness
Example Output
Incident Assessment Output
Incident ID: INC-2024-0847
Initial Classification: Confirmed breach (customer data exposed)
Severity: CRITICAL
Regulatory Trigger: GDPR Article 33, HIPAA Breach Notification Rule, California Consumer Privacy Act
Notification Deadline: 72 hours (GDPR), 60 days (HIPAA), 30 days (CCPA)
Escalation Decision Output
✓ Notify CEO immediately
✓ Engage legal counsel
✓ Alert cyber insurance carrier
✓ Prepare regulatory notification (GDPR)
✓ Schedule all-hands employee communication
✗ No press statement needed at this stage
Communication Template (Board Notification)
To: Board of Directors
Subject: URGENT: Security Incident Response — Customer Data Exposure
We are managing an active security incident involving unauthorized access to customer payment data. All systems have been secured. External forensics firm engaged. Regulatory notifications proceeding per legal guidance. Full briefing in 2 hours.
What's Included
- SKILL.md: Complete incident response orchestration workflow
- Incident Assessment Template: Severity classification matrix and impact assessment checklist
- Regulatory Requirements Matrix: Compliance triggers and notification timelines for GDPR, HIPAA, PCI-DSS, SOC 2, and state privacy laws
- Escalation Decision Trees: Visual workflows for notification prioritization
- Communication Templates: Board notifications, customer alerts, employee announcements, regulatory filings
- Incident Log Format: Timestamped response record for audit compliance
- Post-Incident Review Checklist: Root cause analysis and lessons-learned framework
Who It's For
- Chief Information Security Officers (CISOs) — Need rapid, compliant incident orchestration under pressure
- Security Incident Response Managers — Lead cross-functional response coordination
- Security Operations Center (SOC) Directors — Triage and escalate incidents to executive leadership
- Compliance Officers — Ensure regulatory notification and documentation requirements are met
- Enterprise Security Leaders — Establish incident response playbooks and escalation procedures
Best For
- Immediate incident triage and severity classification — Determine if you have a reportable incident and how critical it is
- Executive escalation decisions — Know exactly who to notify and when
- Regulatory compliance notification — Meet GDPR, HIPAA, PCI-DSS, and state privacy law timelines
- Crisis communication planning — Draft notifications to board, employees, customers, and regulators
- Post-incident root cause analysis and recovery — Structured review to prevent future incidents
You might also like
Extract critical lease terms and financial obligations in minutes, identify risks and red flags that could impact deal profitability, and generate professional broker memos with negotiation strategy recommendations. You'll transform lease documents into actionable intelligence for faster, more confident decision-making.
by nakano1122
You systematically analyze multi-layered enterprise architectures, identify critical trade-offs across scalability, cost, and risk, and generate documented decisions that align technical choices with business strategy. This skill produces comprehensive architecture reviews that expose hidden dependencies, quantify implementation trade-offs, and deliver prioritized, actionable recommendations backed by formal Architecture Decision Records.
by nakano1122
You can leverage Claude to conduct thorough code reviews, evaluate code quality, identify architectural issues, and provide actionable feedback to your frontend engineers. This skill helps you standardize code review practices across your team, catch bugs before production, and maintain consistent quality standards while scaling your engineering capacity.
by nakano1122
You get a structured decision-making framework tailored to scale-ups navigating rapid growth. Claude helps you evaluate technical architecture choices, plan team scaling with hiring rubrics, prioritize technical debt against velocity demands, and craft engineering strategy communications for leadership. The framework balances short-term velocity with long-term maintainability.
by nakano1122
This skill transforms complex lease agreements into clear, actionable analysis. It evaluates terms against market benchmarks, identifies negotiation leverage points, and generates professional recommendation letters that strengthen your position in lease discussions.
by nakano1122
You get immediate structured incident assessment and response coordination. Claude analyzes incident severity, impact scope, and escalation requirements—then generates decision trees, stakeholder communication templates, and post-incident review guides. This skill accelerates your response from triage through resolution to after-action review.
by nakano1122
Create comprehensive auction briefs for commercial properties that include compelling investment thesis, detailed comparable property analysis, targeted buyer personas, and compliance documentation. Claude analyzes property details, local market conditions, and asset specifications to produce professional briefs that maximize buyer interest and streamline the auction process. The skill generates investment highlights, financial projections, and buyer targeting strategies tailored to specific property types and market conditions.
by nakano1122
This skill evaluates industrial real estate deals by analyzing property fundamentals, comparable market data, risk factors, and investment metrics. You get detailed assessments of deal viability, market positioning, and potential returns—all structured to support your investment thesis with hard data. Whether you're analyzing a single property or comparing multiple deals, you'll receive an executive summary with a clear buy/hold/pass recommendation.
by nakano1122