A step-by-step playbook for the first hours and days of a ransomware attack – contain, assess, notify, recover and learn – with decision points, contact lists, ICO and insurer reporting, the payment question and an incident log.
IT & cyber security
Ransomware Response Plan
About this document
Ransomware encrypts or steals a business’s data and demands payment. It is one of the most serious cyber threats facing UK businesses of every size. The decisions made in the first hours – what to disconnect, who to call, what to preserve – can make the difference between a few days’ disruption and losing the business. This plan gives clear steps, owners and contacts, prepared in advance.
The document is laid out in the sections below. Each one comes with a plain-English guidance note explaining what it does and what to change.
Our templates are professionally structured starting points for UK businesses, not legal advice. For anything complex, unusual or high-value, have your final version checked by a solicitor.
Included in the pack
IT & cyber security
for every document in this category
Editable Microsoft Word files
Guidance notes in every document
Written for UK businesses
Download and keep
Need more than one category?
Documents All-Access gives you every category for 12 months for £295.
Compare options →Need it tailored?
We can adapt any template to your business, or write a document from scratch.
Talk to us →
