Cyber resilience: incident management

Cyber capability toolkit to help organisations develop plans for responding to the threat of cyber attacks.

The cyber capability toolkit has been created to help organisations manage their cyber incident response.

The toolkit (attached) contains:

  • a model public sector incident response plan template
  • a model incident response plan template for private and third party organisations
  • a set of playbooks covering data loss, denial of service, malware, phishing and ransomware 
  • a cyber incident assessment tool designed to provide high level insight into the organisation's maturity across a range of related incident management controls

The toolkit will be subject to constant review, building on good practice, lessons from exercises and incidents and feedback from public bodies.

Cyber incident response plan - public sector: template
Cyber incident response plan - private and third sector: template
Cyber incident response: data loss playbook
Cyber incident response: denial of service playbook
Cyber incident response: malware playbook
Cyber incident response: phishing playbook
Cyber incident response: ransomware playbook
Cyber incident readiness assessment



Back to top