Incident Response Policy Starter

Best For

• ▸Businesses that need a documented incident response policy
• ▸Organizations preparing for insurance that requires one
• ▸Companies that want escalation and response expectations codified
• ▸Businesses that want a practical incident policy

What Is Included

• ✓Incident response policy draft
• ✓Incident definition and classification
• ✓Escalation and reporting procedures
• ✓Response role assignments
• ✓Documentation and notification requirements
• ✓Policy adoption guidance

What You Get

• →A documented incident response policy
• →Clear escalation and response expectations
• →A policy that works during an actual incident
• →Documentation for insurance and compliance

What Is Not Included

• —Hardware, licenses, subscriptions, permits, or third-party service fees unless explicitly included
• —Major remediation beyond the purchased scope
• —Emergency after-hours response unless the emergency product is purchased
• —Legal, tax, insurance, or regulatory advice
• —Credential collection through public forms

Customer Prerequisites

• ⓘAuthorized decision maker approval
• ⓘA contact person who can answer business and technical questions
• ⓘSafe access coordination when admin work is required
• ⓘPermission to document findings and recommendations

Questions We Will Ask

To get started, we will ask about:

• Business name*

  Legal or public-facing business name.

• Primary contact name*

  Main person Maine Cyber Tech should coordinate with.

• Primary contact email*

  Used for scheduling, service updates, and deliverables.

• Best phone number

  Useful for urgent, onsite, or access-sensitive work.

+9 more questions