Product
Cyber Incident Response Kit
Know exactly what to do in the first 72 hours of a breach.
An incident response plan, step-by-step playbooks for the attacks small businesses actually face, and the notification templates for POPIA, GDPR and the UK.
For: Businesses without a security team that need a plan their insurer and their staff can follow.
Choose your edition
Each edition includes everything in the one before it. Pay once; updates for 12 months are included.
Plan
The plan, the roles and the contact sheet.
R790
Once-off, one organisation. Excludes VAT where it applies.
- Incident response plan, plus a one-page quick reference
- Roles and responsibilities (RACI)
- Severity matrix
- Emergency contact sheet and incident log (Excel)
- Editable Word files
- Most chosen
Kit
Playbooks for the attacks you are most likely to face.
R1 990
Once-off, one organisation. Excludes VAT where it applies.
- Everything in Plan
- Eight playbooks: ransomware, invoice fraud, lost device, account takeover and more
- Notification guides for POPIA, GDPR and UK GDPR, plus insurers, banks and police
- Templates: regulator and customer notices, staff message, holding statement
Exercise
Practise it once before you need it.
R4 490
Once-off, one organisation. Excludes VAT where it applies.
- Everything in Kit
- Facilitator guide and 16-slide facilitator deck (PowerPoint)
- Three tabletop scenarios with timed injects
- After-action report template
What is inside
Plan edition
- Incident response plan
- Who decides, who does what and in what order, built on NIST SP 800-61r3 and the UK NCSC's small-business guidance.
- One-page quick reference
- The first 90 minutes on a single sheet, for the wall or the glovebox.
- Roles, severity and contacts
- A RACI chart, a severity matrix, and an emergency contact sheet in Excel.
- Incident log
- A running record of decisions, evidence and costs (Excel), which your insurer will ask for.
Kit edition adds
- Eight playbooks
- Ransomware, invoice and payment fraud, phishing and stolen passwords, Microsoft 365 or Google account takeover, malware, a lost or stolen device, data sent to the wrong person, and website compromise.
- What to do, when
- Each playbook covers the signs, the first 15 minutes, the first 24 hours, the first 72 hours, and the evidence to keep.
- Notification guides
- POPIA section 22, GDPR articles 33 and 34, UK GDPR and the ICO, plus when to call your insurer, bank and the police.
- Ready-to-send templates
- Regulator notice, notice to affected people, staff message and a customer holding statement.
Exercise edition adds
- Facilitator guide and deck
- Run a 90-minute tabletop exercise yourself, with a 16-slide deck and presenter notes.
- Three scenarios
- Ransomware on a Friday at 17:00, a CEO-fraud payment request, and a lost laptop with client data, each with timed injects.
- After-action report
- Turn what the exercise exposed into owners and dates.
Questions
Will this satisfy my cyber insurer?
Most insurers ask whether you have a written, tested incident response plan. This kit gives you both the plan and the test. Check your policy's exact wording, and tell your insurer first in a real incident.
Do I need technical staff to use it?
No. The playbooks are written for an owner or office manager working with whoever looks after your IT, and they say plainly when to call a specialist.
How do I pay and receive the files?
Order the edition you want and we email you a secure payment link in rand or US dollars. Once it is paid, the files are delivered by email and to your Sys-Ki client portal.
Can I use it in more than one company?
Each purchase covers one organisation. Consultants and IT providers who want to use a kit with their own clients can ask us for a consultant licence.
Is this legal advice?
No. The kits are practical templates and guidance from a security engineer. Have policies that carry legal weight reviewed by your attorney or data protection officer before you adopt them.
Prefer it done for you?
Want a security engineer on call to write the plan with you and run the exercise?