Cyber Incident Response Pack
We'll help you be ready before the incident, not during it
The worst time to design your response is while you are losing data. This pack gives you the playbooks, evidence-collection scripts, and decision tools to run an incident end to end, plus the templates to brief executives, regulators, and insurers while it is happening.
In an incident you do not rise to the occasion. You fall to the level of your preparation.
The first hour decides how the next week goes: who is in charge, what gets isolated, what evidence is captured before it is lost, who has to be told and by when. Teams that have never written this down lose that hour improvising. The cost is not just downtime. It is evidence destroyed by a well-meant reboot, a notification deadline missed, an insurer claim weakened.
This pack is that preparation, ready to run. Policy and governance, the playbooks to follow under pressure, the scripts to capture evidence correctly, and the templates to brief executives, regulators, and insurers, so an incident is something you work through rather than something that works through you.
What you can actually do with it
The pack maps to the phases of a real incident, with the documents and tools each phase needs.
Playbooks for the incidents you will actually face
Generic advice does not help at 2am. These are step-by-step playbooks for specific situations, plus a generator to build your own.
Evidence collection that holds up
Most IR template packs stop at documents. This one ships working collection scripts, so volatile evidence is captured correctly under pressure instead of lost to a reboot.
Scripts to capture volatile evidence, system configuration, and logs, with a single triage runner to collect everything at once.
Matching collectors for volatile evidence, configuration, and logs, with a run-all script for fast, consistent triage.
An evidence preservation and chain-of-custody process so what you collect stands up later, including with an insurer or in court.
What this looks like in practice
You open the ransomware guide, run the triage collectors before anything is rebuilt, and brief leadership from a prepared template instead of from panic.
The classification engine sets the severity and the notification reference tells you the reporting clock, so a regulatory deadline is met, not missed.
The test exercise guide runs a tabletop against your own playbooks, and the readiness scorecard shows where you are still exposed.
Have the plan, the playbooks, and the tools ready before the call comes.
Editable Word and Excel, runnable Windows and Linux scripts · Buy once, and we send you every future update
Who it's for
Organizations that have realized they could not actually run an incident today, IT and security leads who need a defensible capability without building it from scratch, and consultants standing up incident response for clients. The pack also covers what insurers and regulators expect to see, so the work you do here pays off in cover and in compliance, not only in the response itself.
See inside
Real pages from the documents
A free sample from the Cyber Incident Response Pack. No email required, open it and judge the quality for yourself.
What is inside
Every document in the pack
19 documents, mapped to ten frameworks including NIST SP 800-61 Rev. 3, ISO 27001:2022, and NIST CSF 2.0. Buy once, and every future update is included.
Want to see the quality behind the titles? Preview a sample document →
Document Customization
Need this customized to your organization?
Complete an intake form. We customize every document: industry context, regulatory mapping, calibrated parameters. Delivered in 7-10 business days.
Need the skills to operate the program? Our training platform builds the capability. Explore courses →