Intro

This guide will link you to resources, but also describes common pitfalls. You can probably find a lot of policies and guidelines online that can help you set up a good incident response plan. However, how can you convince management that this has priority? How will you implement changes in your organization? What steps and actions are even relevant to your organization? Have you ever had a fire drill? You probably know you are not supposed to take your bag with you. But, your bag contains your house key. It is just a drill, I'll leave it for now. But what will you do when a fire breaks out? Will you follow the guidelines as practiced? Or will you take your bag with you? Do you know why you aren't supposed to take your bag with you?

During a cyber incident, how will people respond? Do they know what to do? How many people depend on their laptop and access to an internal wiki when trying to find emergency contacts? Can they reach you in time when their laptop is locked? This guide is an invitation to think about what you need during an incident. What your company needs.