Incident Response
A clear start when the situation is not.
Understand the initial conversation, scoping and coordination involved in engaging specialist incident support.
01
The initial discussion.
Describe the event, when it was discovered, known affected systems and the person coordinating the response. Do not provide passwords or sensitive evidence through a public inquiry form.
02
Authority, scope and arrangements.
Confirm the organization, authorized contacts, priorities and engagement arrangements. Availability, response scope and commercial terms are agreed rather than assumed from a website visit.
03
Working communication.
Establish how the response team will share information, approve actions and receive findings. A common understanding of responsibilities helps avoid conflicting instructions.
RELEVANT SOURCES
Start with what is available.
Discuss the sources that can help answer the question, within an authorized scope.
BEFORE WE BEGIN
A more useful first conversation.
- Nominate an authorized contact.
- Gather a concise incident summary.
- Have relevant IT and advisory contacts available.
YOUR NEXT STEP
Bring clarity to the response.
Tell us what you need to understand.
