Cybersecurity Consulting & MSSP

Write a security risk assessment report for [ORGANIZATION NAME], a [INDUSTRY] organization with [SIZE] employees. Assessment scope: [SCOPE, e.g., corporate network, cloud infrastructure, remote workforce]. Structure: 1) Executive summary: top 3 risks and recommended priority actions (non-technical, 1 page), 2) Assessment methodology: framework used (NIST CSF/ISO 27001/CIS Controls), scope, and approach, 3) Current state findings: findings by domain (Identify, Protect, Detect, Respond, Recover) with severity ratings (Critical/High/Medium/Low), 4) Gap analysis: current state vs. target state for each domain, 5) Risk register: top 10 risks with likelihood, impact, risk score, and recommended control, 6) Remediation roadmap: prioritized actions by timeframe (immediate/30-day/90-day/long-term). Professional, board-ready format.

Write an incident response playbook for a [INCIDENT TYPE: ransomware/data breach/phishing/DDoS/insider threat] incident for [ORGANIZATION NAME]. Structure: 1) Incident classification: severity levels (P1–P4) with definitions and examples, 2) Detection and triage: indicators of compromise, initial assessment steps, and escalation criteria, 3) Containment: immediate containment actions (specific, technical), isolation procedures, 4) Eradication: root cause identification, malware removal, vulnerability patching, 5) Recovery: system restoration sequence, validation steps, monitoring requirements, 6) Communication: internal notification chain, customer notification trigger criteria and template, regulatory notification requirements, 7) Post-incident: lessons learned meeting agenda, report template, control improvement tracking. Include: RACI matrix for each phase, decision trees for key choices.

Write a board-level cybersecurity report for [ORGANIZATION NAME] for [QUARTER/YEAR]. Requirements: 1) Security posture summary: one paragraph, no technical jargon — describe the organization's security health in business terms, 2) Key metrics: 4–5 metrics that matter to the board (not technical metrics — business risk metrics: % of critical systems patched, phishing click rate, mean time to detect, cyber insurance coverage adequacy), 3) Top risks: 3 risks framed as business risks with financial/operational impact, 4) Incidents this period: summary of any incidents and business impact, 5) Investments and outcomes: what was spent on security and what risk was reduced, 6) Recommended decisions: 2–3 specific decisions the board needs to make. Length: 1 page. Tone: business-first, risk-focused, decision-oriented.