Incident Response Kit

Most incident response plans fail in the same three places: nobody can find them, nobody knows who calls whom, and nobody realises that three separate notification clocks started ticking the moment the incident was discovered.

This kit is built around those clocks. The plan's centrepiece page puts the ICO's 72 hours, your insurer's notification conditions and the fraud reporting line in one place, with the decision rules for starting each. Around it sits a full but proportionate plan: severity levels, roles with deputies, containment steps that preserve evidence, and scenario playbooks for ransomware, payment fraud, mailbox compromise and supplier failure, each checked against current vendor procedures.

The First Hour Card is the part you will actually use. Two printable pages of exactly what to do before help arrives, written for the person who finds the problem, not for the specialist. Print two copies today. The Excel log turns every incident and every yearly exercise into the dated records that certification, insurance and customer questionnaires ask for. Brandable copies of the plan and card are included, so what goes up on the wall carries your logo, not ours.