I have written about this before – write your plans down because when you and your support teams are under stress, during an incident, a well structured plan can be followed and if required adapted, to guide everyone through.
Now the National Cyber Security Centre is telling all organisation to have a written plan:
Have plans on paper in case of cyber-attack, firms told – BBC News
I have helped a variety of organisations write an incident response and business continuity plan – ask and we can help you.
Clive Catton MSc (Cyber Security) – by-line and other articles
Further Reading
My Ransomware Primer includes information on why a written plan is essential.

