Cybersecurity
Incident & Ransomware Response Plan
A clear plan for the day something goes wrong: who does what, who to call, and how to restore — before you need it.
For businesses that would not know who to call if ransomware hit or an email account was hacked, or whose cyber insurer or customer has asked for a plan. You get an incident response plan for SMEs with ransomware, hacked-email and lost-device playbooks, a contact sheet and the PDPC breach-notification steps.
What's included
- Incident response plan tailored from our online questionnaire
- Ransomware, hacked-email and lost-device playbooks
- Contact sheet: bank, SingCERT, police, insurer, vendors
- PDPC breach-notification steps and 3-day timeline
- Restore steps matched to your backups
- Online tabletop exercise pack you can run with your team in 30 minutes
- Annual review reminder
What you get
Illustrative exampleNot included
- Being on call during an incident
- Legal advice
- Testing your defences by attacking them (needs a CSA-licensed provider)
What we need from you
- Answers to our online questionnaire (about 30 minutes)
- Names and phone numbers of your key people and suppliers
How it goes
- 1
Order & brief
Answer a few questions about your business — about 3 minutes.
- 2
Pay securely
PayNow or card through Stripe. Receipt issued straight away.
- 3
Give access
We send step-by-step instructions to invite us — no passwords by email.
- 4
Review & done
We deliver, you review on your order page, we refine until it's right.
Incident & Ransomware Response Plan — questions
No. The plan tells your team what to do and who to contact. Being on call during an incident is not included.
It is built from your answers to a 30-minute online questionnaire, and the restore steps are matched to the backups you actually have.
You get a tabletop exercise pack you can run online with your team in about 30 minutes, and a reminder to review the plan each year.
Save with a kit
Incident & Ransomware Response Plan is part of this kit
More in cybersecurity
Cybersecurity
Microsoft 365 / Google Security Lockdown
Turn on MFA for everyone, block phishing and risky sign-ins, and stop accidental file sharing.
5 business days
Cybersecurity
Antivirus & Endpoint Protection Rollout
Business-grade protection on every laptop and desktop — Microsoft Defender, Bitdefender or ESET — set up properly on licences you own.
5 business days
Cybersecurity
Password Manager Rollout
Stop sharing passwords on WhatsApp and Excel — a company password manager with shared vaults for each team.
5 business days