INCIDENT CONTACT SHEET ====================== [Organization name]. Last checked: [date] by [name]. How to use this template: fill in every row you can and delete those that do not apply. Call each number once, out of hours, to check it works. Print it and keep copies somewhere other than your office network. Role | Organization or person | Phone | Out-of-hours phone | Email or website | Reference | Notes ----------------------------------------+------------------------+-------+--------------------+------------------+-----------------------+------------------------------------------------ Incident lead | | | | | | Makes decisions in the first hour Deputy | | | | | | Decides if the lead cannot be reached Cyber insurer (claims line) | | | | | Policy number: | Many policies require a call before hiring help IT support | | | | | | National cyber security agency | | | | | | Where to report an incident Police (cybercrime or non-emergency) | | | | | | Bank (fraud line) | | | | | Account: | Lawyer | | | | | | Data protection regulator | | | | | | If personal data may be involved Email and productivity platform support | | | | | Account or tenant ID: | Key software vendor | | | | | | Internet provider | | | | | Account: | Board chair or director | | | | | | Communications or press contact | | | | | | Funders to inform | | | | | | Staff phone tree ---------------- Who calls whom if email is down. Keep personal numbers here only with each person's agreement. Caller | Calls | Phone ----------------+--------+------ [Incident lead] | [Name] | [Name] | [Name] | ------------------------------------------------------------ Template by Moraph for Good (https://moraph.org/commons/templates). Free to copy and adapt under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Attribution: "Moraph for Good".