Cyber Incident Response Playbook
This Playbook provides utilities with practical guidance and critical considerations in preparing for a cyber incident and developing a response plan that enables staff to take swift, effective action. Cybersecurity managers can use the playbook as a step-by-step guide to prepare for an incident.
Clarify who the key players are, outline roles and responsibilities, and clearly identify which individuals have the authority to take critical response actions. Document how to contact team members 24/7, designate an alternate for key roles, and outline a battle rhythm for how and when the team will convene and deliver updates.