Incident Response Plan Template

A ready-to-edit incident response plan for Australian SMBs — so you know exactly who does what when something goes wrong.

What's inside

Be ready before the incident

The worst time to design your response is during a breach. This editable template gives you a head start.

  • Roles, contacts and escalation paths
  • Severity levels and response times
  • A six-phase, NIST-aligned response process
  • Notifiable Data Breaches (NDB) considerations
  • Internal and customer communication templates

Australian-based, security-first MSSP — aligned to the ACSC Essential Eight. (Replace with verified ratings / client count.)

Get the template

Enter your details and we'll email you the download.

We'll only use your details to send this resource and follow up about your security. Unsubscribe anytime.

Frequently asked questions

What is an incident response plan?

It is a documented, agreed process for detecting, containing, eradicating and recovering from a security incident, including who is responsible and how you communicate.

Do I have to notify anyone after a breach?

Under the Privacy Act's Notifiable Data Breaches scheme, an eligible breach likely to cause serious harm must be reported to the OAIC and affected individuals. The template includes guidance, but seek advice for your situation.

Can Cryptiq help us test this plan?

Yes. We help build, tabletop-test and operationalise incident response, and can act as your 24/7 response partner.