# Incident contact sheet

[Organization name]. Last checked: [date] by [name].

> How to use this template: fill in every row you can and delete those that do not apply. Call each number once,
> out of hours, to check it works. Print it and keep copies somewhere other than your office network.

| Role | Organization or person | Phone | Out-of-hours phone | Email or website | Reference | Notes |
| --- | --- | --- | --- | --- | --- | --- |
| Incident lead | | | | | | Makes decisions in the first hour |
| Deputy | | | | | | Decides if the lead cannot be reached |
| Cyber insurer (claims line) | | | | | Policy number: | Many policies require a call before hiring help |
| IT support | | | | | | |
| National cyber security agency | | | | | | Where to report an incident |
| Police (cybercrime or non-emergency) | | | | | | |
| Bank (fraud line) | | | | | Account: | |
| Lawyer | | | | | | |
| Data protection regulator | | | | | | If personal data may be involved |
| Email and productivity platform support | | | | | Account or tenant ID: | |
| Key software vendor | | | | | | |
| Internet provider | | | | | Account: | |
| Board chair or director | | | | | | |
| Communications or press contact | | | | | | |
| Funders to inform | | | | | | |

## Staff phone tree

Who calls whom if email is down. Keep personal numbers here only with each person's agreement.

| Caller | Calls | Phone |
| --- | --- | --- |
| [Incident lead] | [Name] | |
| [Name] | [Name] | |

---
Template by Moraph for Good (https://moraph.org/commons/templates). Free to copy and adapt under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Attribution: "Moraph for Good".