Publication - Advice and guidance

Cyber resilience: incident management

Last updated: 21 Jul 2021 - see all updates
Published: 4 Oct 2019

Cyber capability toolkit to help organisations develop plans for responding to the threat of cyber attacks.

4 Oct 2019
Cyber resilience: incident management

The cyber capability toolkit has been created to help organisations manage their cyber incident response.

The toolkit (attached) contains:

  • a model public sector incident response plan template
  • a model incident response plan template for private and third party organisations
  • a set of playbooks covering data loss, denial of service, malware, phishing and ransomware 
  • a cyber incident assessment tool designed to provide high level insight into the organisation's maturity across a range of related incident management controls

The toolkit will be subject to constant review, building on good practice, lessons from exercises and incidents and feedback from public bodies.



First published: 4 Oct 2019 Last updated: 21 Jul 2021 -