Cyber Incident Response Kit

Prepare a response plan before a security problem. ZIP: PDF and editable Word plan, seven response guides, seven message templates, first-hour card, three practice discussions and blank/example incident spreadsheets.

Guidance, not legal advice or a reporting decision. If a personal-information breach must be reported, the organisation deciding how the information is used must tell the Information Commissioner's Office, the UK data protection regulator, without unnecessary delay and, where feasible, within 72 hours of awareness. Tell affected people without unnecessary delay if the risk to them is high. An organisation handling information for a customer must tell that customer without unnecessary delay even when regulator reporting is not required. Record every breach and the reporting decisions. Check current official guidance. Spreadsheets checked in LibreOffice, a set of office programs, not Microsoft Excel; no official endorsement.

Published by William Baptist | Tidy Desk Digital.