Skip to content
Abdul Ibrahim.
All work

SaaS product 2025–26

CBR₂

CBR₂ turns incident response planning from a document that sits in a drawer into a living, governed plan. Teams are guided through each section, then publish, maintain and export the plan as their organisation changes.

Role
Product design and development
Independent project
Platform
Web
Status
Live
CBR₂ homepage with the headline “Resilience plans that are complete, current, and ready when it matters”, above a preview of the resilience overview dashboard.

01 Overview

CBR₂ helps organisations create and maintain incident response plans that their teams can actually use during an incident — not just show to an auditor.

02 The problem

Incident response plans are often incomplete, untested or out of date. Writing one from scratch against frameworks such as ISO/IEC 27035 and NIST SP 800-61 takes specialist time that many organisations don’t have.

03 Who it’s for

Organisations of all sizes, and the people responsible for security, risk, continuity and governance within them.

04 My role

I designed and built the marketing website and the web application, including the plan builder, plan management, live plan views and document export.

05 The solution

Instead of a blank document, teams answer guided questions with sensible pre-filled content and watch the plan take shape in a live preview. Finished plans are published as locked, versioned documents with a dashboard for the details people need during an incident.

  • Guided plan builder

    Question-led sections with pre-filled content and a live, side-by-side document preview.

  • Plan governance

    Ownership, review schedules and document control captured before a plan can go live.

  • Versioned live plans

    Published plans are locked; changes happen in a new draft version so there’s always a clear, approved copy.

  • Incident-ready views

    A live dashboard surfaces response teams, severity levels and contacts, with full PDF export.

CBR₂ platform section listing supported frameworks including ISO 27035, ISO 22301, NIST CSF and NIST SP 800-61.
Structured around recognised frameworks, without the jargon.
CBR₂ homepage on a phone.
CBR₂ framework section on a mobile screen.

06 Key decisions

  1. a.

    Questions, not blank pages

    Specialist frameworks are translated into plain questions with suggested answers, so teams make decisions rather than write from scratch.

  2. b.

    Governance built in

    Locking live plans and requiring ownership details mirrors how resilience documents are approved in practice.

  3. c.

    Useful in the moment

    The live plan view prioritises what people need under pressure — who to call, how severe it is and what to do next.

07 Technology

  • React
  • TypeScript
  • Tailwind CSS
  • shadcn/ui
  • Vercel

Working on something similar?

Turning specialist knowledge into a product people can use?

Tell me what you’re planning. I’ll help you work out the right scope and approach.

Discuss your project Visit CBR₂ (opens in a new tab)