Crisis Management & Incident Response

Stand up a war-room, preserve evidence, communicate cleanly, and recover fast — defensible under scrutiny.

ICS
War-room roles
Comms
Matrix & channels
Evidence
Preserve & log
Recovery
Milestones
Filter by role:
Overall
0%
Controls
0%
Escalation
0%
72-Hour Flow
0%

Mark items as implemented. Use the role filter to focus each team.

ICS / War-Room 0%
Communications 0%
Evidence & Legal 0%
Facilities & Safety 0%
Logistics & Resources 0%
IT/OT Coordination 0%

NotifyWithinChannelLogDone
Security Lead2hTicket + EmailIncident # + summary
Facilities4hTicketAction items
NotifyWithinChannelLogDone
IC + Security + Facilities1hBridge + TicketInitial severity set
Legal + PR2hEmail (privileged)Privilege note
NotifyWithinChannelLogDone
IC + Legal + Exec15mBridge + SignalDecision log started
LE/Fire (if applicable)30mPhonePOC/time
NotifyWithinChannelLogDone
All-hands (IC, Security, Facilities, IT/OT, Legal, PR, HR, Exec)ImmediateWar-RoomChronology live
Regulators/LE (as required)1hPhone + EmailPreservation order

Elapsed: 00:00:00 Started:
T+0 to 1h — Stabilize & Preserve 0%
T+1 to 4h — Contain & Communicate 0%
T+4 to 24h — Investigate & Document 0%
T+24 to 72h — Recover & Review 0%