For the person who IS the IT department

When it goes wrong at 2am, know exactly what to do.

10 plain-English incident-response runbooks built for small businesses with no security team. Ransomware, phishing, stolen laptops, breach notification — the first 15 minutes, step by step.

Get the pack — $29 (launch price, reg. $49)
Read the Phishing & Email-Fraud runbook free →

The problem

Every incident-response guide assumes you have a SOC, a SIEM, and a security team. You have Microsoft 365, a backup you're not sure about, and a phone that's ringing. These runbooks assume exactly that — and nothing more.

What's inside

01 · Ransomware responseIsolate, call your insurer first, the ransom-decision framework nobody gives you.
02 · Phishing & email fraud (BEC)Clicked-link flowchart, inbox-rule hunting, stopping a payment already sent.
03 · Compromised accountKill sessions, sweep OAuth grants, hunt persistence in M365 & Google Workspace.
04 · Backup restore drillThe quarterly 60-minute drill that tells you if your backups are real.
05 · Lost or stolen deviceRemote-wipe decision tree, exposure assessment, the police-report step.
06 · Website / service compromiseTake-offline call, WordPress sweep, DNS hijack check, registrar lockdown.
07 · Emergency offboardingSame-hour access kill checklist for a hostile departure.
08 · Breach notificationScope worksheet, insurer-before-announcement sequencing, letter templates.
09 · Tabletop exercise kitRun your own 60-minute drill: facilitator script + 3 scenarios + scoring.
10 · Incident log & contact sheetEvidence-grade log template + the severity matrix everything else references.

How it works

Each runbook is the same shape: severity quick-set → first 15 minutes → containment → investigation (with actual M365 / Google Workspace menu paths) → recovery → communications, plus copy-paste email templates for staff, customers, and your insurer. Fill in your company details once, print them, put them in the drawer you'll reach for when the screen turns red.

$49$29

Launch price · Editable Markdown + DOCX · Free v1.x updates · 30-day refund, no questions

Get IncidentReady →

Questions

Is this for me?

If your company has 5–50 people and "IT" is one person (maybe you), yes. If you have a security team and a SIEM, you already have heavier tooling than this.

Is this legal advice?

No. The breach-notification runbook maps the process and gives you templates, but state laws vary — it tells you exactly when to call counsel.

What format?

ZIP: Markdown masters plus DOCX and PDF exports. Edit anything, rebrand internally, print it.

Refunds?

30 days, no questions asked. If it doesn't make you more prepared, don't pay for it.