SYSTEM FORCE IT - CYBER INCIDENT RESPONSE TOOLKIT
Version 1.0 - August 2026
systemforce.co.uk  |  01452 701355

WHAT THIS IS
A free, practical toolkit to help a UK SME prepare for and respond to a cyber
incident. Everything here supports the full guide at:
systemforce.co.uk/blog/2026/08/26/cyber-incident-response-plan-uk/

The files are practical templates, not legal advice. Check current NCSC and ICO
guidance, and take professional advice for your specific circumstances.

WHAT'S IN THE PACK
  01. Incident Response Plan Template (Word)      - your organisation's plan
  02. First 72 Hours Checklist (PDF)              - print and keep offline
  03. Incident Log (Excel)                        - record actions and decisions
  04. Severity Assessment Matrix (PDF)            - grade an incident
  05. Emergency Contact Sheet (Word)              - print and keep offline
  06. Evidence Register (Excel)                   - track evidence you collect
  07. Personal Data Breach Assessment (Word)      - decide if it's reportable
  08. Incident Communications Pack (Word)         - holding templates
  09. Cyber Incident Playbook Pack (PDF)          - seven quick playbooks
  10. Post-Incident Review Template (Word)        - learn from it (no blame)
  11. Tabletop Exercise Pack (PDF)                - four rehearsal scenarios
  README (this file)

COMPLETE THESE BEFORE AN INCIDENT
  - 01 Incident Response Plan Template (roles, authority, contacts, severity)
  - 05 Emergency Contact Sheet

PRINT AND KEEP OFFLINE (you'll need them when systems are down)
  - 02 First 72 Hours Checklist
  - 04 Severity Assessment Matrix
  - 05 Emergency Contact Sheet
  - a printed copy of your completed 01 Incident Response Plan

USE DURING AN INCIDENT
  - 02 First 72 Hours Checklist (work top to bottom)
  - 03 Incident Log (record everything, with times)
  - 04 Severity Assessment Matrix
  - 06 Evidence Register
  - 07 Personal Data Breach Assessment
  - 08 Incident Communications Pack
  - 09 Cyber Incident Playbook Pack

USE AFTERWARDS
  - 10 Post-Incident Review Template

USE TO REHEARSE
  - 11 Tabletop Exercise Pack (run one or two a year)

A NOTE ON FORMATS
Word (.docx) and Excel (.xlsx) files are editable - fill them in and adapt them
to your organisation. You can save any of them as a PDF from within Word or Excel.
PDFs are print-ready. The Excel files contain no macros.

Need help building your incident-response capability? Talk to System Force IT
about a readiness review: systemforce.co.uk/free-it-audit/  |  01452 701355

UKAS ISO/IEC 27001:2022 Certified - Microsoft Solutions Partner - Certified 3CX
Partner - Cyber Essentials Practitioners - RIPE NCC Member - Supporting UK
businesses since 2006.
