Recent cyber breaches at major corporations highlight the increasing sophistication, stealth, and persistence of cyber attacks that organizations are facing today. Successfully defending and recovering from a cyber attack is a holistic process and encompasses extensive preparation at the people, process and technology level. The preparation against cyber attacks starts from the identification of key assets, knowing individuals role during crisis management, understanding regulatory obligations and maintaining  key data artifacts for  enabling technical experts to unfold a clear picture of the events leading to cyber incidents.