Resources / Cybersecurity Procedures / Procedure and Runbook Library

Procedure and Runbook Library

Browse Procedure and Runbook Library guidance, related topics and practical resources to support cybersecurity planning, implementation and review.

Writing a Cybersecurity Standard Operating Procedure Procedure Ownership, Approvals, and Review Cycles Procedure Inputs, Outputs, and Evidence Requirements Access Request and Approval Procedure Joiner, Mover, and Leaver Procedure Privileged Access Review Procedure Vulnerability Intake and Triage Procedure Emergency Patching and Change Approval Procedure Security Exception and Risk Acceptance Procedure Supplier Security Assessment Procedure Incident Escalation and Notification Procedure Digital Evidence Preservation Procedure Backup Restoration and Recovery Verification Procedure Secure Disposal and Media Sanitization Procedure Security Questionnaire Response Procedure Regulatory and Standards Change Assessment Procedure Editable Procedure and Runbook Templates Procedure Testing and Walkthrough Checklists
CISO Joe

Sign in or create an account

Choose how you want to continue. CISO Joe never asks you to create a password. Every sign-in method requires your email address; if your provider asks, allow it to share your email.

or

We’ll send a one-time code to your email address.

By continuing, you agree to the Terms of use and acknowledge the Privacy notice.

Use your company’s single sign-on (SSO).

A note before we talk

Joe is an AI guide. Audio and messages are processed by OpenAI so Joe can respond. Don’t share passwords, personal records, or confidential business information.

You choose how to join in. Voice requires your microphone permission; you can mute or end it at any time. Typing does not need microphone access.

We use a 30-day usage cookie and hashed network identifiers to enforce limits. The site does not save your conversation history; recent conversations stay only in this browser tab and clear when you close it.

If you sign in, AWS Cognito handles your account and we store a hashed, expiring session identifier in PostgreSQL. CISO Joe uses email codes or your chosen identity provider; no password is created or stored by this website.

Usage limits apply to this public service. Joe can help you explore ideas, but check important decisions with the right people for your organization.

Read OpenAI’s privacy policy