Incident Response Starter Kit
A calm, step-by-step playbook for the first hours after you've been hacked or breached.
Cybersecurity & PrivacyPDF · 9 pages· v1.0
4.4A calm, step-by-step playbook for the first hours after you've been hacked or breached.
Cybersecurity & PrivacyPDF · 9 pages· v1.0
4.4When something goes wrong - a ransomware screen, a drained account, a stolen laptop, a data leak - panic and improvisation make it worse. This starter kit gives you a pre-written, ordered plan so you act correctly under pressure instead of guessing. It walks through the universal incident-response lifecycle (prepare, detect, contain, eradicate, recover, learn) in plain language, then provides ready-to-use playbooks for the incidents people and small businesses actually face: account takeover, ransomware/malware, lost or stolen device, data breach exposure, and business email/wire fraud. Each playbook tells you what to do first, what NOT to do (the well-meaning mistakes that destroy evidence or make recovery harder), who to notify, and how to know it's over. It's built for individuals and small businesses without a security team. The emphasis is on the first few hours, when fast, correct action limits the damage. You'll also get the preparation pieces that make a real incident survivable: an incident contact sheet to fill in now, a simple evidence-preservation checklist, and a notification guide covering who you may be obligated to tell. Print it, fill in the blanks, and keep a copy somewhere you can reach even if your main systems are down. The best time to write your response plan is before you need it.
Yes. Go to the matching playbook (account takeover, ransomware, lost device, data breach, or wire fraud) and follow the ordered steps. Each starts with the most time-critical actions and a clear list of what not to do.
Both. The playbooks scale - an individual skips the staff-notification steps; a small business uses them. The contact sheet and notification guide are designed to be filled in for either case.
The guide covers this carefully: paying is risky, doesn't guarantee recovery, and may have legal implications, which is why prevention via backups matters. It walks you through assessing options and when to bring in professionals and authorities.
If you want to make an insurance claim, file a police report, or hold anyone accountable, the first instinct to wipe and reinstall can destroy the proof. The checklist shows the few simple things to capture before you clean up.
Read the full refund policy and trust & safety terms.