Quick reference links for managing and coordinating the response to cyber incidents

Management

McKinsey crisis management

FEMA Incident Command System (ICS)

FEMA IS-100.C: Introduction to the Incident Command System, ICS 100

PagerDuty incident response training course

Disclosure

ICO personal data breach guidance

WP29 guidelines on personal data breach notification under regulation

WP29 opinion 4/2007 on the concept of personal data

GDPR relevant provisions - see articles 33, 34, 58, 83 and recitals 75, 85-88

Companies Act 2006 General duties of directors

UK Corporate Governance Code

Cyber security: balancing risk and reward with confidence

FCA Disclosure Guidance and Transparency Rules sourcebook

SEC Commission Statement and Guidance on Public Company Cybersecurity Disclosures

Slaughter and May Cyber Security: Corporate insights for companies and their directors.

Technical

NIST cyber Security framework

ASD essential eight explained

ASD strategies to mitigate cyber security incidents

MITRE ATT&CK™ framework

CIS top 20

NCSC 10 steps to cyber security

PwC rapid risk reduction

Microsoft - Best practices for securing Active Directory

Microsoft - Securing privileged access

Microsoft - Pass-the-hash whitepapers

Microsoft - How to mitigate rapid cyberattacks such as Petya and WannaCrypt

Sean Metcalf's Active Directory Security Talks

Securing PowerShell in the Enterprise

PowerShell Logging

Remediating Targeted Intrusions

Responding to a compromised Office 365 email account