The First Hour: A Small Business Incident Response Plan

When an account, device, or website is compromised, the first hour matters. This plan tells you what to do, who to call, and what to say, written for organizations with no security team.

What's inside:

- What to set up now, before anything goes wrong

- The first 15 minutes: how to contain a problem without destroying evidence

- Matching your situation to first moves: stolen password, payment fraud, ransomware, lost device, hacked website, misdirected data

- Who to call and in what order (insurer, bank, IT help, attorney, law enforcement)

- A step-by-step playbook for a hacked WordPress site

- Message templates for your team, your customers, and your bank

- Three worksheets: contact sheet, incident log, and after-action review

Fill in the contact sheet today, and print a copy. Instant PDF download. This is general information and not legal, security, or insurance advice. Follow your insurer's instructions.