Netflix releases Dispatch for crisis management orchestration
Is your organization prepared for security incidents? Dispatch has come to the rescue. The orchestration framework was developed by Netflix and recently released open source. It integrates with popular tools like Jira, Slack and GSuite to help you manage and keep track of incidents.
Time is of the essence when it comes to dealing with a crisis in your organization, may it be a security or other type of incident. To assist you with this, Netflix has released Dispatch, a crisis management orchestration framework. Here is what Netflix has to say about it:
All of the ad-hoc things you’re doing to manage incidents today, done for you, and a bunch of other things you should’ve been doing, but have not had the time!
SEE ALSO: How To Securely Program in Java in 2020
But before we get to the details of Dispatch, first let’s see what crisis management is.
According to the Netflix Tech Blog, crisis management mainly consists of these four components:
- Resource Management
- Individual Engagement
- Life Cycle Management
- Incident Learning
Resource management means all metadata is collected, not only data about the incident itself, while individual engagement refers to the best way to engage individuals as well as teams. Life cycle management implies providing the Incident Commander (IC), whose task it is to resolve the incident, with tools to manage the incident’s life cycle. Incident learning means learning from past incidents for faster resolution of future incidents.
So, how can Dispatch help with addressing these issues?
Features of Dispatch
Dispatch is defined as a crisis management orchestration framework. It manages incident metadata and resources by leveraging APIs of tools that are being widely used, mainly Slack or GSuite. Unlike other Netflix tools, Dispatch does not use AWS APIs. Additionally, it provides multiple integration points so it can be adapted to an existing environment. Although Dispatch was developed for managing security incidents, it is not restricted to this use case.
Dispatch is designed to offer a number of benefits. For example, it helps provide standardized communications across incidents, automatic engagement of incident participants and central tracking of incidents.
An Incident Commander (IC) can use the following workflow with Dispatch:
This is what a security incident report looks like:
And here is an overview of tracked incidents:
SEE ALSO: Proactive security engineering
See the NetflixTech Blog for further details.