Reddit reviews Crafting the InfoSec Playbook: Security Monitoring and Incident Response Master Plan

This is your curriculum:

1 & 2 below are basically required reading in my CSIRT; 3 is optional, but advisable.

1. The Practice of Network Security Monitoring: Understanding Incident Detection and Response by Richard Bejtlich
   
   
2. Crafting the InfoSec Playbook: Security Monitoring and Incident Response Master Plan by Jeff Bollinger, Matthew Valites, and Brandon Enright
   
   
3. Incident Response & Computer Forensics, Third Edition by Jason Luttgens, Matthew Pepe, & Kevin Mandia will shore up any other gaps.
   
   Next get yourself and/or your organization to participate in FIRST

In your situation I would take charge if I were you. If you don't at least make that attempt it's your own fault.

If there's no security department, make one. Use what you learned in the Sec+ and then maybe --> https://www.amazon.com/Crafting-InfoSec-Playbook-Security-Monitoring/dp/1491949406/ref=sr_1_1?ie=UTF8&qid=1521475275&sr=8-1&keywords=crafting+infosec+playbook

Identify what is weak at your company, put together a project plan, etc... sounds like the perfect opportunity for you to learn the hard way and then when you do win you can say, "I took initiative, stood up a small infosec department and hardened the company and it's data"

know what i mean jellybean?

I'm mostly interested in large upticks of spam volume so I can take early action to mitigate any collateral damage we might incur like blacklisting. Additionally, if there is a sudden surge of emails with our domain aimed at us I can assume someone is trying to start a campaign against our organization. I'm basically developing another play for the playbook. Which, BTW Crafting the InfoSec Playbook is one of the better things I've read in a while. Definitely some review (especially for a fellow CISSP) but defiantly some interesting topics and I generally like their approach. You may want to check it out.