🚨 Incident Response Playbook Generator

What is an incident response playbook?

An incident response playbook is a documented set of steps an organisation follows when a security incident occurs — such as a data breach, ransomware attack, or account takeover. It covers containment, investigation, communication, and recovery actions.

What is CERT-In and do I have to report to them?

CERT-In (Indian Computer Emergency Response Team) is India's national cybersecurity agency. Under the CERT-In Directions 2022, organisations must report certain cyber incidents within 6 hours of detection. The AI playbook includes the specific obligations relevant to your incident type.

What is the DPDP Act and how does it relate to data breaches?

The Digital Personal Data Protection Act 2023 (DPDP) requires organisations to notify the Data Protection Board and affected individuals in the event of a personal data breach. The severity and timeline depend on the breach's scope and sensitivity.

How quickly should I act after a ransomware attack?

Immediately. Disconnect affected systems from the network within minutes to prevent spread. Do not pay the ransom without expert advice. Preserve logs and evidence before any cleanup. This tool generates a prioritised timeline tailored to your incident.

Can I use this playbook as a legal defence document?

The playbook provides a structured response framework, not legal advice. For regulatory compliance (CERT-In, DPDP, SEBI, RBI), consult a cybersecurity legal counsel. Keep records of all actions taken during the incident.

What is the Cyber Crime National Helpline 1930?

1930 is India's national cybercrime helpline operated by the Ministry of Home Affairs. You can call it to report online financial fraud. The helpline coordinates with banks and payment platforms to freeze funds before they are transferred out.