Incident Response & Media Communication
Guidelines and templates for responding to security incidents and communicating with the public
Response Guidelines
Immediate Response (0-2 hours)
- • Assess the situation
- • Contain the incident
- • Notify key stakeholders
- • Issue brief public statement
Detailed Response (2-24 hours)
- • Complete investigation
- • Determine impact scope
- • Coordinate with authorities
- • Provide detailed updates
Long-term Response (1+ days)
- • Implement fixes
- • Restore full operations
- • Provide compensation if needed
- • Share lessons learned
Media Response Templates
Data Breach
Immediate Response
We are aware of a potential security incident and are investigating. We will provide updates as information becomes available.
Detailed Response
Following our investigation, we have identified unauthorized access to certain customer data. We have contained the incident and are working with authorities.
Long-term Response
We have implemented additional security measures and are offering credit monitoring services to affected customers.
Ransomware Attack
Immediate Response
Our systems are currently experiencing technical difficulties. We are working to restore services and will provide updates.
Detailed Response
We have been affected by a ransomware incident. Our backups are secure and we are working with cybersecurity experts to restore operations.
Long-term Response
We have enhanced our security posture and are committed to protecting our customers' data with improved measures.
Service Outage
Immediate Response
We are experiencing a service interruption and our team is working to resolve it quickly.
Detailed Response
The outage was caused by a DDoS attack. Our mitigation systems are now active and services are being restored.
Long-term Response
We have invested in additional DDoS protection and will continue to monitor and improve our resilience.
Important Notes
- • Always consult legal counsel before making public statements
- • Be transparent but don't disclose sensitive investigation details
- • Coordinate with law enforcement and regulatory bodies
- • Have a designated spokesperson for all communications
- • Document all communications and decisions for future reference