A ready-to-use plan for cyber attacks and security incidents – team roles, severity levels, step-by-step playbooks for ransomware, email compromise, lost devices and data breaches, and who to report to.
IT & cyber security
Information Security Incident Response Plan
About this document
The plan you follow when something goes wrong with your IT or information security: who is in charge, how serious it is, what to do in the first hour and the first day, how to recover, and when to tell Report Fraud, the NCSC, the Information Commission, your insurer, your bank and your clients. Four playbooks cover the incidents small organisations face most.
The document is laid out in the sections below. Each one comes with a plain-English guidance note explaining what it does and what to change.
Our templates are professionally structured starting points for UK businesses, not legal advice. For anything complex, unusual or high-value, have your final version checked by a solicitor.
Included in the pack
IT & cyber security
for every document in this category
Editable Microsoft Word files
Guidance notes in every document
Written for UK businesses
Download and keep
Need more than one category?
Documents All-Access gives you every category for 12 months for £295.
Compare options →Need it tailored?
We can adapt any template to your business, or write a document from scratch.
Talk to us →
