Leveraging AI to Review and Strengthen Your Incident Response Plan: A Proof of Concept @FIRSTdotorg
Leveraging AI to Review and Strengthen Your Incident Response Plan: A Proof of Concept  @FIRSTdotorg
Uploaded August 2026 | Updated September 2026, 46 minutes ago
John Hollenberger (Fortinet, US)

Incident Response Plans (IRPs) are essential but maintaining them is often time-consuming and reactive. This session presents a proof of concept that uses artificial intelligence to analyze and enhance IRPs for completeness, clarity, and alignment with standards such as NIST 800-61.Attendees will see how AI can identify gaps, flag outdated procedures, and suggest targeted improvements—reducing manual review time while supporting better preparedness. We’ll explore the process from data preparation through analysis and validation, sharing lessons learned and practical takeaways from testing AI-assisted review on areal plan. By the end, participants will understand both the potential and limitations of using AI to modernize IR planning, improve response readiness, and strengthen overall cyber resilience.

---

John Hollenberger is a seasoned cybersecurity consultant with over 19 years of experience helping organizations strengthen their defenses and prepare for the realities of today’s evolving threat landscape. Throughout his career, John has guided clients through complex security challenges — from building proactive security strategies to leading high-impact incident response efforts.

As the Lead Consultant of Proactive Services at Fortinet, he works closely with organizations to enhance their readiness, resilience, and ability to respond effectively when incidents occur. John is deeply committed to educating others on the importance of preparation, collaboration, and continuous improvement in cybersecurity. He holds a range of industry certifications, including CISSP, GCIH, GWAPT, CISA, CISM, CRISC, and Security+.
Leveraging AI to Review and Strengthen Your Incident Response Plan: A Proof of ConceptWho Did It? Getting Started with Threat Actor ProfilingFIRSTCON26 Event RecapEpisode 59: Julie Agnes Sparks and Greg Foss, Datadog, FIRSTCON26 SpeakersHow Attackers Reconstruct You: Measuring Identity Exposure Across Four Attack SurfacesDealing With Uncertainty: Scenario Planning for Cybersecurity Decision-MakingEpisode 60: Mars Cheng, TXOne Networks Inc., FIRSTCON26 SpeakerThe Party Isnt Over: Uncovering Konfetys Novel Evil Twin Technique2026 FIRST CTI Conference - Day 2 Plenary Sessions - Live StreamImproving Security Across Nations with FIRST: Ken van Wyk, FIRST MemberTabletop Lessons from 3 Decades and 2 ContinentsUncovering the Whispers of an APT Targeting Specific Industries in South Asia
FIRST |

Leveraging AI to Review and Strengthen Your Incident Response Plan: A Proof of Concept

SHARE TO X SHARE TO REDDIT SHARE TO FACEBOOK WALLPAPER