Book a call

Mature & respond

Incident Response Planning

Prepare. Respond. Recover. Grow stronger. Plans your team can follow under pressure.

Discuss your requirements What's included

Overview

When a cyber incident happens, the first hours matter most. A clear, tested plan reduces confusion, cost and reputational damage.

I help you build an incident response capability that fits your organisation: roles, decision-making, communication and practical playbooks for the most likely scenarios.

Ideal for

  • Organisations without a documented response plan
  • Businesses whose plan has never been tested
  • Teams needing to satisfy insurers or auditors

What's included

Scope of the service

Response plan

Roles, severity levels, escalation and decision-making.

Playbooks

Step-by-step guides for ransomware, data breach, BEC and more.

Crisis management

Link technical response to executive crisis management.

Communications

Templates for staff, customers, regulators and media.

Regulatory duties

Guidance on UK GDPR breach reporting and other obligations.

Lessons learned

A post-incident review process that drives improvement.

How it works

A clear, practical process

  1. 01

    Assess

    Review current capability, contracts and insurance.

  2. 02

    Design

    Build the plan and playbooks with your team.

  3. 03

    Test

    Validate with a tabletop exercise.

  4. 04

    Maintain

    Review and update after changes or incidents.

Outcomes

What you can expect

  • Faster, calmer response when it matters
  • Reduced impact and recovery cost
  • Clear roles and communication
  • Evidence for insurers, customers and regulators

Frequently asked questions

Do you provide 24/7 incident response?

I focus on planning, preparation and coordination. For hands-on forensics, I can help you select and contract a specialist retained provider.

Do we need an incident response plan for Cyber Essentials or ISO 27001?

ISO 27001 expects incident management to be planned and tested, and many cyber insurers ask for a documented plan. Cyber Essentials does not require one, but it is strongly recommended for any organisation.

Related services

Tabletop Exercises

Test your response before it matters, with realistic scenarios for technical teams and executives.

Learn more

Risk Management

Make informed security decisions with risk assessments, registers and treatment plans.

Learn more

NCSC Cyber Assessment Framework

Assess and build resilience against the NCSC CAF's four objectives and fourteen principles.

Learn more

Let's talk

Start your journey to a more secure tomorrow.

A free, no-obligation 30-minute discovery call to understand your goals and suggest the most practical next step.

Book a discovery call Email me