Incident & backup response: SOP template
Purpose: respond to a security or outage incident in a controlled way. Scope: any incident affecting accounts, data, or systems. Have this ready before you need it.
Detect & assess
- 1
Log the incident: what, when, who noticed, and the impact
- 2
Classify severity and notify [incident owner]
Contain & recover
- 3
Contain it: isolate affected accounts/devices, reset credentials, enforce MFA
- 4
Restore from the latest known-good backup [where backups live]
- 5
Verify systems and data are back to normal
Learn
- 6
Write a short post-incident review: cause, fix, and prevention
- 7
Update this SOP and any control that failed
Make this SOP yours in minutes
Start with this template, then record the real workflow with the Dyzo Owl Chrome extension — every click becomes a step with a screenshot. Share it with a link; readers never need an account.