Incident response procedure
Download this document free
Get this document with your free trial. Choose from the full Complyzard library.
Try 1 month free30 days free, then $19/month. Trial terms apply. Card required. Cancel anytime.Document information
For the incident manager, security responders and legal, privacy or service owners to assess events, coordinate response, preserve records, communicate, recover and learn.
- Document type
- Procedure
- Format
- DOCX
- Pages
- 10
- Language
- English
- Version
- 1.0
- Updated
- 2026-09-15
- Category
- Information security
- Licence
- Internal use
Description
For the incident manager, security responders and legal, privacy or service owners to assess events, coordinate response, preserve records, communicate, recover and learn.
Contents
- Document control
- Purpose of this procedure
- Maintain readiness between incidents
- Activate incident command
- Create the opening incident record
- Maintain a shared chronology across specialist tracks
- Assess consequence, spread, and urgency
- Investigate competing explanations
- Set objectives for the operating period
- Protect responder capacity and continuity
- Branch card: suspected account or credential compromise
- Branch card: malware or destructive activity
- Branch card: possible information exposure
- Branch card: supplier or cloud service event
- Branch card: unsafe or unavailable service
- Branch card: exploitation of a software weakness
- Branch card: extortion or coercive demand
- Contain while preserving investigation options
Version history
- v1.015/09/2026