Incident response
Define governance, assess incidents and coordinate a response supported by evidence.
Free cybersecurity resources · English and French
Policies and procedures built for adoption.
Eight substantive resources in each language. Read online or download DOCX, PDF and Markdown, without registration.
Policies establish internal requirements after approval. Playbooks guide incident response. The investigation workbook records evidence, decisions and handovers.
Investigation workbook
Record evidence, hypotheses, decisions and SOC handovers in an actionable case record.
Ransomware response
Coordinate containment, investigation and recovery following a ransomware incident.
Phishing and account compromise
Assess a report, investigate account activity and verify containment measures.
Vulnerability and patch management
Govern risk prioritisation, deployment, exceptions and verification of remediation.
Access management and MFA
Control access lifecycles, authenticators and the acceptance of access exceptions.
Security logging and monitoring
Define collection objectives, log quality controls and accountability for alert handling.
Backup and restoration
Approve recovery objectives and demonstrate restoration capabilities through testing.
Configure, review and approve
Define the scope, accountable owners, operational parameters and approval authority. Review the proposed requirements with the relevant teams and test procedures before adoption. Editable DOCX and Markdown, printable PDF and the browser page share the same content and version.
These templates do not certify compliance or describe controls already implemented by your organisation. Notification obligations, deadlines and retention periods depend on the applicable context. Use the language switch to open the matching French resource.
You may copy, adapt and reuse these templates internally. Referenced external sources retain their own reuse terms. Suitability for your environment must be assessed before adoption.