[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-240383-105":53,"doc-detail-240383-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","cyber-incident-response-plan-guidance-and-template-starting-point","Cyber Incident Response Plan Guidance and Template - Starting Point","","Provides guidance and a CIRP template to help organisations establish an effective cyber incident response capability and readiness. Defines cyber security incidents and explains why plans must be in place, tested, and regularly reviewed. Emphasises alignment with incident, emergency, crisis, and business continuity arrangements, including legal and regulatory obligations, and coordination principles under Australia’s CIMA. Includes supporting readiness checklist and references to relevant standards and resources.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":11,"@type":70,"position":76},"https://docshare.wps.com/template/presentations/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/cyber-incident-response-plan-guidance-and-template-starting-point/240383/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/cyber-incident-response-plan-guidance-and-template-starting-point/240383.png","ImageObject",442,249,{"name":88,"@type":89},"Melati","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-21","2026-09-11",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",8,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What is the purpose of the Cyber Incident Response Plan (CIRP) Template?","Question",{"text":109,"@type":110},"It is intended as a starting point for organisations to develop their own cyber incident response plan and readiness checklist. Each organisation must tailor it to its operating environment, priorities, resources, and obligations.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"Why must organisations test and regularly review their cyber incident response plan?",{"text":114,"@type":110},"The plan should ensure effective response and prompt recovery when security controls do not prevent an incident. Testing and regular review help maintain effectiveness and readiness over time.",{"name":116,"@type":107,"acceptedAnswer":117},"How should a CIRP align with other organisational arrangements?",{"text":118,"@type":110},"A cyber incident response plan should align with incident, emergency, crisis, and business continuity arrangements, as well as jurisdictional and national cyber and emergency arrangements. It must outline personnel responsibilities and legal and regulatory obligations.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},240383,1791743670,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":136,"language":137,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":61,"update_tm":141,"read_time":142},962085570644,"https://ap-avatar.wpscdn.com/davatar_994ba38a5ba835b3df7d355c54d3ed8d","Cyber Incident Response Plan Guidance and Template  \nDecember 2021  \nAbout this document  \nContext  \nThe Australian Government defines cyber security as measures used to protect the confidentiality, integrity and availability of systems and information. A cyber incident is an unwanted or unexpected cyber security event, or a series of such events, that have a significant probability of compromising business operations.1  \nAustralian organisations are targeted by malicious cyber adversaries. The Australian Cyber Security Centre’s (ACSC) assessment is malicious cyber activity against Australia’s national and economic interests is increasing in frequency, scale, and sophistication. As adversaries become more adept, the likelihood and severity of cyber attacks is also increasing due to the interconnectivity and availability of information technology platforms, devices and systems exposed to the internet.  \nTo illustrate the volume of cyber incidents occurring in Australia, the ACSC responded to over 1500 cyber security incidents between 1 July 2020 and 30 June 2021.2 While many of the incidents reported to the ACSC could have been avoided or mitigated by good cyber security practices, such as implementation of ASD’s Essential Eight security controls, risks will still remain when organisations operate online.  \nManaging responses to cyber incidents is the responsibility of each affected organisation. All organisations should have a cyber incident response plan to ensure an effective response and prompt recovery in the event security controls don’t prevent an incident occurring. This plan should be tested and regularly reviewed.  \nTo be effective, a cyber incident response plan should align with the organisation’s incident, emergency, crisis and business continuity arrangements, as well as jurisdictional and national cyber and emergency arrangements. It should support personnel to fulfil their roles by outlining their responsibilities and all legal and regulatory obligations.  \nWhile organisations are responsible for managing incidents affecting their business, Australia’s Cyber Incident Management Arrangements (CIMA) outline the inter-jurisdictional coordination arrangements and principles for Australian governments’ cooperation in response to national cyber incidents.3  \nPurpose  \nThe Cyber Incident Response Plan (CIRP) Template and the Cyber Incident Response Readiness Checklist (Appendix B) are intended to be used as a starting point for organisations to develop their own plan and readiness checklist.  \nEach organisation’s CIRP and checklist need to be tailored according to their unique operating environment, priorities, resources and obligations.  \nIn addition to a CIRP, organisations can develop more detailed, day-to-day procedures to supplement the cyber incident response plan. This could include more detailed playbooks to aide response to common incident types, such as ransomware or data breaches, and standard operating procedures (SOPs) to respond to incidents affecting specific assets.  \n1 Australian Cyber Security Centre, [cyber.gov.au](cyber.gov.au), ‘Glossary’, accessed 16 December 2020.  \n2 Australian Cyber Security Centre, [cyber.gov.au](cyber.gov.au), ACSC Annual Cyber Threat Report 1 July 2020 to 30 June 2021.  \n3 Cyber Incident Management Arrangements for Australian Governments (CIMA), December 2018.  \nAcknowledgements  \nThis document was created by the ACSC using multiple resources. The ACSC acknowledges the following resources used to develop this template:  \n􀁸 The Australian Government Information Security Manual (ISM) .  \n􀁸 Australian Prudential Regulation Authority (APRA) Prudential Practice Guide CPG 234 Information Security June 2019 ([https://www.apra.gov.au/sites/default/fi](https://www.apra.gov.au/sites/default/fi)les/cpg 234 information security june 2019 1. pdf) .  \n􀁸 A Cyber Incident Response Plan template developed by efforts of the Australian Energy Sector Readiness and Resilience Working Group in 20","cbCaidIcJ1SQqJm8","https://ap.wps.com/l/cbCaidIcJ1SQqJm8","pdf",7637621,38,"English","# About this document\n## Context\n## Purpose\n# Acknowledgements\n# Questions and Feedback","[{\"question\":\"What is the purpose of the Cyber Incident Response Plan (CIRP) Template?\",\"answer\":\"It is intended as a starting point for organisations to develop their own cyber incident response plan and readiness checklist. Each organisation must tailor it to its operating environment, priorities, resources, and obligations.\"},{\"question\":\"Why must organisations test and regularly review their cyber incident response plan?\",\"answer\":\"The plan should ensure effective response and prompt recovery when security controls do not prevent an incident. Testing and regular review help maintain effectiveness and readiness over time.\"},{\"question\":\"How should a CIRP align with other organisational arrangements?\",\"answer\":\"A cyber incident response plan should align with incident, emergency, crisis, and business continuity arrangements, as well as jurisdictional and national cyber and emergency arrangements. It must outline personnel responsibilities and legal and regulatory obligations.\"}]","Cyber Incident Response Plan Guidance and Template - Starting Point | PDF",1789160726,13]