Incident response plan template, and help for right now
Something happened? Set the severity, see the first steps and download a first-response checklist in under a minute. Free, and nothing leaves your browser.
Getting ready before it happens? The Incident Response & Business Continuity Kit has the full plan, 12 playbooks, a business continuity and disaster recovery plan, 6 tabletop exercises and a workbook. $249.
Runs locally · nothing uploaded
What's happening?
Incident Response & Business Continuity Kit
Severity levels
| Level | When | Respond |
|---|
Playbooks: the first 15 minutes
- Phishing and business email compromise
- Ransomware
- Lost or stolen device
- Data sent to the wrong person or exposed
- Compromised account or cloud admin access
- Malware on a device
- Major outage or denial of service
- Supplier or third-party breach
- Data leaked to an AI tool
- Rogue or misbehaving AI agent
- Prompt injection against an AI assistant or agent
- Deepfake or voice-clone payment fraud
What goes in an incident response plan · Tabletop exercise examples
AI and agent incidents
A rogue AI agent, prompt injection, data leaked to an AI tool, or a deepfake call asking for a payment: see the AI and agent incident playbook for the first 15 minutes of each.
Questions
Is anything uploaded?
No. The page is blocked from sending data anywhere (connect-src 'self' https://agenttrustcloud.com).
Do I have to notify anyone?
It depends on the data, where the people are, your contracts and your insurance. Some deadlines are measured in hours or days from discovery, so involve your legal adviser early. This tool isn't legal advice.
Should I switch the computer off?
Usually no: disconnect it from the network and leave it on, so evidence in memory isn't lost. Follow your IT provider's advice.