Incident response plan template, and help for right now
Something happened? Set the severity, see the first steps and download a first-response checklist in under a minute. Free, and nothing leaves your browser.
Getting ready before it happens? The Incident Response & Business Continuity Kit has the full plan, 9 playbooks, a business continuity and disaster recovery plan, 6 tabletop exercises and a workbook. $249.
Runs locally · nothing uploaded
What's happening?
Incident Response & Business Continuity Kit
Severity levels
| Level | When | Respond |
|---|
Playbooks: the first 15 minutes
- Phishing and business email compromise
- Ransomware
- Lost or stolen device
- Data sent to the wrong person or exposed
- Compromised account or cloud admin access
- Malware on a device
- Major outage or denial of service
- Supplier or third-party breach
- AI tool data leak or misuse
What goes in an incident response plan · Tabletop exercise examples
Questions
Is anything uploaded?
No. The page is blocked from sending data anywhere (connect-src 'none').
Do I have to notify anyone?
It depends on the data, where the people are, your contracts and your insurance. Some deadlines are measured in hours or days from discovery, so involve your legal adviser early. This tool isn't legal advice.
Should I switch the computer off?
Usually no: disconnect it from the network and leave it on, so evidence in memory isn't lost. Follow your IT provider's advice.