An incident response playbook, not a long policy document
A common criticism of Incident Response plans are that they’re too lengthy, do not properly identify stakeholder responsibilities and are not kept ‘alive’ and up to date.
Lockdown provides a crisis-ready, operational incident response plan designed for real-time use during a cyber incident. The IRP defines roles, escalation thresholds, decision authority, and the steps required to contain harm, preserve evidence, maintain safeguarding and business operations, and manage communications with staff, parents/guardians, suppliers and insurers. It includes practical checklists alongside templates for incident logging, decision recording, internal updates and external notifications. The outcome is a plan that is usable under pressure, not a policy document.
- A living and build for purpose document
- Clear and actionable stakeholder responsibility and roles
- Communications plan and templates
- Helps to identify and triage incidents
- Practical templates for decision recording
- Format: planning workshop and documented playbook
- Duration: scoped engagement
- Audience: leadership, IT, security, risk, compliance, operations
- Ideal for: organisations that need a clear, current plan for real incidents
- What's included: living incident response plan + roles and responsibilities + comms templates + triage and decision tools
Incident Response Planning
Common problems
“Our plan is too long and no one would use it.”
Explore problem →Recommended focus: creating a playbook built for real-time use
You’ll get: a clear plan your team can follow“We’re not ready to communicate under pressure.”
Explore problem →Recommended focus: building comms templates and a simple plan
You’ll get: clearer internal updates and external notifications“Roles aren’t clear, so decisions will be delayed.”
Explore problem →Recommended focus: defining responsibilities and decision authority
You’ll get: faster escalation and clearer ownership“We’re worried about evidence being lost in the rush.”
Explore problem →Recommended focus: preserving evidence and recording decisions
You’ll get: better investigations and defensible actions“We don’t know when an issue becomes an incident.”
Explore problem →Recommended focus: setting triage thresholds and escalation triggers
You’ll get: quicker containment and fewer missed signals“Our plan isn’t kept up to date.”
Explore problem →Recommended focus: keeping the plan alive with simple maintenance
You’ll get: a document that stays usable year-roundWhat this training covers
- A crisis-ready incident response plan designed for real-time use
- Role definitions, responsibilities, escalation thresholds and decision authority
- Steps to contain harm, preserve evidence and maintain operations
- Practical checklists that guide early actions under pressure
- Templates for incident logging, decision recording and status updates
- Communications plan and templates for internal and external notifications
Ask for price
Tell us your organisation size, key stakeholders, and any existing plans you have today. If you’d like a call back, leave your phone number in the optional message field and we’ll get back to you. We’ll recommend the best-fit option and send a clear quote.
