Clear steps when a security incident happens.

A shared response plan your team can work from when decisions need to be made quickly.

• A response plan built around your business, existing procedures and available people or providers.
• Clear stages, responsibilities and decision points, from the first report through recovery coordination and review.
• Contact details, initial evidence guidance and a walkthrough of how to use and maintain the plan.

A consistent way to judge incident severity and decide what should happen next.

• Incident categories and severity levels based on potential business impact.
• Practical examples and criteria for making an initial assessment when information is incomplete.
• A mapping from each level to the required response, escalation and reassessment steps.

A clear route to the people who need to act, with a fallback when the first contact is unavailable.

• Escalation triggers and a workflow linked to your incident severity levels.
• Named contacts, deputies and decision owners, with agreed contact methods.
• A walkthrough of the handoffs, including missed responses and unavailable contacts.

A chance to practise decisions together and find gaps before a real incident adds pressure.

• A realistic security scenario tailored to your business, systems and response arrangements.
• A facilitated discussion that works through decisions, handoffs and communication as the scenario develops.
• A debrief with observed gaps, agreed lessons and a prioritized improvement list.

A reusable structure for capturing what happened, what helped and what should change.

• A tailored review template covering the timeline, business impact, response decisions and available evidence.
• Prompts to explore contributing factors and lessons without turning the review into a search for blame.
• An action log with owners and review dates, plus guidance for running the review.

A clearer view of your readiness to respond, with the gaps and first priorities explained.

• A review of response arrangements for agreed information exposure scenarios.
• Checks of how the team would establish facts, preserve relevant records and involve decision makers or specialists.
• Prioritized findings covering response gaps, communication decisions and questions requiring legal or specialist input.

A focused playbook that makes the next actions and decision points easier to follow under pressure.

• A playbook for the agreed scenario, built around your systems, available people and existing response plan.
• Action checklists covering initial checks, approvals, escalation, evidence and coordination with technical responders.
• A walkthrough with the relevant team, with unclear steps and dependencies recorded for follow-up.

Clear update and approval steps, so communication is coordinated and based on confirmed information.

• An audience and contact map covering the people and organizations likely to need updates.
• Message ownership, approval steps and communication channels, with alternatives if normal tools are unavailable.
• Adaptable update templates and a decision log for what was communicated, when and by whom.