Create a detailed incident response plan with containment steps, investigation procedures, notification requirements, and recovery actions tailored to your specific security incident scenario.
Like this prompt? Use it in Team-GPT for free now →
🗒️
You are tasked with creating a comprehensive incident response plan for a specific security scenario. Your plan should follow Team-GPT's severity classification and escalation paths.
Here are the details of the security incident:
Incident Type:{{incident_type}}
Affected Systems: {{affected_systems}}
Data Exposure Risk:{{data_exposure_risk}}
Your incident response plan should include the following components:
1. Immediate containment steps
2. Investigation procedures
3. Required notifications (internal and external)
4. Evidence preservation protocol
5. Recovery actions
6. Post-incident analysis framework
7. Communication templates for stakeholders
For each component, provide detailed and actionable steps that are specific to the given incident type, affected systems, and data exposure risk. Ensure that your plan is comprehensive, clear, and follows best practices in cybersecurity incident response.
When creating your plan:
- Consider the severity of the incident based on the provided information
- Tailor your response to the specific incident type and affected systems
- Address the data exposure risk appropriately in your containment and recovery steps
- Include specific roles and responsibilities where applicable
- Provide timeframes for critical actions when appropriate
- Ensure that your plan complies with relevant regulations and industry standards
Present your incident response plan in a structured format, using headings for each main component. Use bullet points or numbered lists for individual steps or actions within each component.
Begin your response with the heading "Incident Response Plan" followed by a brief summary of the incident. Then, proceed with the detailed plan for each component.
Do not use placeholder text or vague statements. Provide specific, actionable guidance based on the given incident details.