Cyber Incident Response First 60 Minutes Checklist
The real First 60 Minutes emergency checklist from the Cyber Incident Response Plan & Toolkit - free, no sign-up.
Overview
This is the actual First 60 Minutes page from our paid Cyber Incident Response Plan & Toolkit - the immediate steps to take in the 0–10, 10–30 and 30–60 minute windows after you suspect a cyber incident.
It's intentionally short so it's genuinely usable under pressure. For the full response process - the plan, workbook, five scenario playbooks and Communication Pack - see the complete Cyber Incident Response Plan & Toolkit.
What's included
- One-page First 60 Minutes emergency checklist (PDF)
Format: PDF
Document preview
Cyber Incident Response First 60 Minutes Checklist
☐ Declare incident · ☐ Assign Incident Lead · ☐ Start Incident Log (0–10 min)
☐ Identify affected systems/accounts · ☐ Contain immediate threat (10–30 min)
☐ Establish initial scope · ☐ Preserve evidence · ☐ Set next review time (30–60 min)
…
Who is this for?
Anyone who wants a printed or pinned reference for the first steps of a suspected cyber incident.
FAQ
Do I need to give my email for this one?+−
No - this checklist downloads immediately with no form to fill in.
Is this enough on its own?+−
It covers immediate first steps only. For a full documented process, including severity classification, playbooks and reporting, see the complete Cyber Incident Response Plan & Toolkit.
More free templates
Free Cybersecurity Risk Register
A simple, genuinely usable cybersecurity risk register to get you started.
Free Business Continuity Checklist
A short checklist for thinking through how your business would keep running through disruption.