Policy template · version 2
Incident Response
Know what to do in the first hour of a breach or outage, who decides, and who has to be told by when. The sponsor bank owes its regulator a 36-hour notice, so your clock is shorter than you think, and the incident log is what proves you met it.
What’s in this policy12 sections · Incident Response · Read the full policy
9Obligations · things you must do
19Evidence · records that prove it
1Monitoring · checks and deadlines
2Reporting · reports you must send
Does this apply to you?
Answer a few questions and each obligation is marked applies, likely, or needs more information.
Tell Leela about your companyHand over the whole policy
Every obligation in this policy, in one request.
What the policy requires
Begin containment within the clock the severity sets
Specialist-led
Notify affected customers when their data or systems were exposed
Prepare for review