Incident Response Plan and Tabletop Kit for Small Business

Your insurer, your clients and your auditors keep asking if you have an IR plan. This kit gives you one that works when something actually happens, plus the playbooks and tabletop exercise to prove it.

An incident response plan you can finish this week

Most small business IR plans are a downloaded template nobody has read. When ransomware hits on a Friday night, nobody knows who calls the insurer, who can shut off remote access or whether it is safe to restore the backups.

This kit was written by people who run incident response for small and mid-size businesses. It is built around what goes wrong in real incidents: calling vendors before the insurer, wiping machines before evidence is saved, talking about the incident on the email account the attacker is reading.

What is inside

  • Start Here guide: how to fill in the kit in an afternoon and who should be in the room
  • Incident Response Plan: roles, severity levels, a first-hour checklist, evidence rules, insurer and counsel steps, communications and recovery, all with fill-in fields
  • Ransomware Playbook: from the first encrypted file to recovery, including the decisions only leadership can make
  • Business Email Compromise Playbook: mailbox takeover and payment fraud, with the Microsoft 365 and Google Workspace steps in plain words
  • Tabletop Exercise: a 90-minute ransomware scenario with a facilitator guide, six injects, discussion questions and an after-action report template
  • Contact and Escalation Sheet: every number you need when your email is down

Every document comes as an editable Word file and as a PDF.

Who it is for

Owners, office managers and IT leads at companies with roughly 10 to 250 people, and the MSPs who support them. No security background needed.

What it is not

It is not legal advice and it is not an incident response service. If you are in the middle of an incident right now, call your cyber insurer’s claims line and an incident response firm first.

$199, one-time purchase. Instant download after payment.

FAQ

Can I use it for more than one company? The license covers the company that buys it. MSPs who want to use it across clients should contact us.

Will this satisfy my insurer? Insurers ask whether you have a written and tested plan. This kit gives you both a plan and a documented tabletop exercise. We cannot promise what any insurer will accept.

What format are the files? Word (.docx) for editing and PDF for reading. They open in Microsoft Word, Google Docs and LibreOffice.

What if it is not what I expected? Email us through the contact page within 14 days and we will refund you.

Questions before you buy? Reach us through the Contact Us page.