The 5-Step Small Business Incident Response Playbook
14 / 15
Text15 min

The 5-Step Small Business Incident Response Playbook

Emergency crisis workflow when facing a cyber breach or suspected data exfiltration.

1. The 5-Step Incident Response Playbook:

Crisis response network operations
Figure 5.3: Security operations command executing emergency triage workflows.
  1. 1. Containment: Sever network cables and disable Wi-Fi to stop lateral movement.
  2. 2. Scope Assessment: Determine breached databases or credentials.
  3. 3. Clean Restoration: Recover from verified offsite immutable snapshots.
  4. 4. Regulatory Disclosure (72h): Notify supervisory bodies under GDPR Art. 33.
  5. 5. Post-Incident Hardening: Remediate root vulnerabilities.