Guidance that helps small to medium sized organisations prepare their response to and plan their recovery from a cyber incident.
Pages
Page 4 of 7
Step 3: Resolve the incident
Steps to get your organisation back on its feet, whether your IT is managed internally or externally.
The actions in this step will help your organisation get back up-and-running as soon as possible. You'll also need to confirm that everything is functioning normally, and fix any problems.
If your IT is managed externally: contact the right people to help
Contact your external IT providers (that you've identified in Step 1) to help you fix the problem. These contacts are there to fix the problem and establish the impact to your organisation.
If you manage your own IT: put your plan into action
It’s time to activate the incident plan you made in Step 1. Depending on the type of incident you are responding to, this may involve:
replacing infected hardware
restoring services through backups
patching software
cleaning infected machines
changing passwords
Action point: If you're considering using services from a cyber security consultant, take appropriate steps to make sure you use reputable organisations, understand their experience, and know how that their offer meets your requirements and your business type. Relevant technology qualifications are a plus. This will help you to choose a provider that suits your organisation.
