Dispatch

Technical Details

Core Capabilities and Implementation Mechanisms

• Incident Management: Dispatch is designed to manage incidents by automating tasks such as timelines, documentation, and communication, allowing teams to focus on resolving the incident.
• Integration with Existing Tools: It integrates with tools like Slack and Google Docs to leverage existing workflows and tools in incident response.
• API and Plugins: Dispatch is API-first, allowing for customization and extension through its API and integrated plugins.

Deployment Architecture and Requirements

• Docker Deployment: Dispatch can be deployed using Docker. The minimum requirements include Docker 17.05.0+ and Docker Compose 1.19.0+. It also requires at least 2400MB of RAM.
• Database: Dispatch uses a PostgreSQL database. The setup includes an option to load example data or initialize a new database.
• Security: For security, Dispatch can be protected with SSL/TLS proxies like HAProxy or Nginx.

Integration Points and APIs

• API: Dispatch provides an API for extending or customizing its functionality. This allows for integration with other tools and systems.
• Plugins: It supports integrated plugins to enhance its capabilities.
• Third-Party Tools: It integrates with Slack, Google Docs, and other tools to manage incident response workflows.

Key Technical Features and Limitations

• Automation: Automates incident management tasks such as timelines, documentation, and communication.
• Customization: Allows customization through its API and plugins.
• Scalability: Dependent on the underlying Docker and PostgreSQL infrastructure, which can be scaled as needed.
• Limitations: Requires specific versions of Docker and Docker Compose, and has minimum hardware requirements. Upgrading PostgreSQL requires manual steps.

Security Controls and Mechanisms Implemented

• SSL/TLS: Supports protection with SSL/TLS using proxies like HAProxy or Nginx.
• User Authentication: Includes user registration and authentication mechanisms.

ISO 27001:2022 Relevance

How the Tool Helps Implement Specific ISO Controls

• Incident Management (A.16): Dispatch helps in managing incidents by automating tasks, which aligns with the incident management requirements of ISO 27001.
• Communication (A.13): It facilitates communication during incidents by integrating with tools like Slack, which is crucial for effective incident response.

Evidence/Artifacts it Can Provide for Audits

• Incident Timelines and Documentation: Dispatch generates and manages timelines and documentation of incidents, which can serve as evidence during audits.
• Communication Logs: Integration with communication tools can provide logs of communications during incidents, which can be used as audit artifacts.

Integration Considerations for Compliance

• Data Security: Ensuring that the data stored in Dispatch is secure and compliant with ISO 27001 requirements, such as encryption and access controls.
• User Access: Managing user access and authentication to ensure that only authorized personnel can access and modify incident data.

Monitoring and Measurement Capabilities

• Incident Metrics: Dispatch can provide metrics on incident response times, resolution times, and other relevant data points, which can be used for monitoring and measurement.

Required Skills and Training Considerations

• Technical Skills: Users need to have basic knowledge of Docker, PostgreSQL, and API integration to set up and customize Dispatch.
• Incident Response Training: Teams should be trained on using Dispatch effectively within their incident response processes.

Pricing & Deployment

Available Pricing Tiers and Models

• Open Source: Dispatch is an open-source tool, which means it is free to use and deploy. There are no specific pricing tiers or models.

Free/Community vs Enterprise Features

• Since Dispatch is open-source, all features are available to everyone without any differentiation between free/community and enterprise versions.

Deployment Options and Requirements

• Docker Deployment: The primary deployment method is through Docker, with specific version requirements for Docker and Docker Compose.
• Hardware Requirements: Minimum hardware requirements include 2400MB of RAM.

Support and Maintenance Details

• Community Support: As an open-source project, support is primarily through the community and GitHub issues.
• Maintenance: The install.sh script is designed to be idempotent, allowing for easy upgrades to the latest version. Manual steps may be required for upgrading PostgreSQL.