Readiness Planning
OTHSolutions’ CISM, CEM and CBCP-certified professionals specialize in planning cyber and operational technology defense, incident management, and continuity of operations consistent with the Joint Planning Process, CPG-101 and FCD-1/2, respectively.
Methodology - P.R.E.V.A.I.L.
Partner
Partner with key stakeholders to iteratively define the plan scope and risk scenarios.
Research
Research best practices and lessons learned to inform courses of action (COAs) which can be undertaken to achieve operational objectives.
Elicit
Elicit insights regarding process flows and vetted CoAs for time-phased or trigger-based decision points.
Validate
Validate options through a series of stakeholder workshops.
Analyze
Analyze the efficacy of options through consensus, red teaming, focus groups, SME elicitation, scenario-based discussions and war games.
Integrate
Integrate the plan through training and exercises.
Learn
Learn and refine.
Performance Snapshots.
Researched and analyzed emerging ransomware trends to develop a novel mitigation approach for a growing threat vector that abuses legitimate software solutions to conduct malicious activity. Collaborated with a curated list of public and private sector stakeholders to validate the concept, develop, implement and measure the efficacy of a unified ransomware risk reduction approach.
Led multiple planning efforts to operationalize intelligence on state-sponsored actors targeting critical infrastructure through cyberspace.
Developed federal interagency planning documents for risk-informed contingency operations, consistent with conventional incident management doctrine. Sample experience includes: CIKR, resource management and earthquake annex updates to the Federal Interagency Operations Plan for Response; power outage hazard annexes for FEMA Regions 4, 5 and 6; a nuclear/radiological hazard annex for FEMA Region 1; and an all-hazards plan for FEMA Region 4.
Planned, trained and exercised continuity of operations for CISA’s Cybersecurity Division across all four phases of the continuity lifecycle: readiness, activation, continuity operations and reconstitution in compliance with CGC1, FCD1 and FCD2.
More services.
