Small business template
Small Business Incident Response Plan Template
Quick answer
An incident response plan names the people, first actions, evidence, providers, and decisions needed when something goes wrong.
Who this is for: Owners and operators without a dedicated incident-response team.
What to do
- 01Name the decision maker and technical, provider, legal, and communications contacts.
- 02Write first actions for account compromise, ransomware, website compromise, and data exposure.
- 03Store a copy outside the systems that may be affected.
- 04Exercise the plan and update contacts quarterly.
What this does not cover
This template is not a substitute for professional incident response or legal advice.
This page is educational information, not legal advice or a professional security audit. Check the official requirements and get qualified help when your circumstances require it.
Continue exploring