Processes

Also called: Workflow, Process

What it is

A process is the high-level, end-to-end way an organization achieves a specific objective. It defines what needs to happen, who is involved, and how success is measured.

Processes focus on outcomes and consistency rather than step-by-step execution. They provide structure and context for how work flows across teams and systems.

Characteristics of a Process

• Outcome-oriented

• Repeatable and scalable

• Often spans multiple roles or teams

• Defines inputs, outputs, and controls

• Managed and measured over time

Example: Incident response process

• Detect security events

• Analyze and prioritize incidents

• Contain and remediate threats

• Communicate and document outcomes

• Review and improve response effectiveness

The process defines what must occur from start to finish, but not the exact keystrokes or screenshots.

Processes vs. Procedures

The terms processes and procedures are often used interchangeably. While they are closely related they are not the same. Understanding the distinction between processes and procedures is critical for building scalable, repeatable and resilient security programs.

A procedure is the detailed, step-by-step instruction for performing a specific task within a process. Procedures explain how to carry out individual activities in a consistent and repeatable way. Procedures are tactical and execution-focused. They reduce ambiguity and ensure tasks are performed correctly regardless of who performs them.

Characteristics of a Procedure

• Task-specific

• Detailed and prescriptive

• Typically owned by a role or function

• Supports consistency and accuracy

• Easier to update as tools or systems change

Example of a procedure using malware containment

1. Identify affected endpoint in the monitoring system

2. Isolate the endpoint from the network

3. Capture forensic artifacts

4. Remove malicious files

5. Restore system from a known-good state

6. Update incident ticket and notify stakeholders

This procedure supports the broader Incident Response Process.

Tracking Processes

Worksheets are a common tool used to track and manage processes for many organizations but FutureFeed provides a much more sophisticated environment for tracking an managing all elements required for compliance, including but not limited to processes.