Incident Response Resources
Playbooks: Mastering Incident Response
CyberAlberta's playbooks are built to support organizations through fast-moving cyber incidents. They provide strategic protocols and proven response approaches so teams can strengthen defenses, reduce confusion during an event, and stay resilient under pressure.
Available Resources
Response Guides for High-Pressure Scenarios
Cyber Compromise Checklist
A guide for Alberta businesses that outlines immediate actions to take after a cybersecurity incident, including engaging incident response teams, reporting to authorities, and notifying relevant organizations for support and recovery.
Last updated: October 2024
Data Breach Playbook
A comprehensive guide for responding to potential data loss incidents with proactive measures and swift response steps to mitigate risk and safeguard sensitive information.
Last updated: April 22, 2024
Data Loss Playbook
A versatile resource focused on data security challenges, with adaptable strategies for prevention, containment, and recovery across a range of incident scenarios.
Last updated: April 22, 2024
Disaster Recovery Playbook
A detailed IT disaster recovery guide covering execution, best practices, and resources to help organizations restore critical services after disruptive events.
Ransomware Playbook
A strategic, step-by-step ransomware response guide that helps organizations fortify defenses and coordinate a fast, effective response when ransomware threatens operations.
Last updated: April 16, 2024
Why Use Playbooks
Turn Uncertainty Into Action
During an incident, speed and clarity matter. Playbooks reduce uncertainty by giving teams a starting structure for containment, escalation, reporting, and recovery. That makes them especially useful for organizations that need practical guidance without building every response process from scratch.
The CyberAlberta library is aligned to common incident response needs facing Alberta organizations, from suspected compromise to ransomware and disaster recovery. Teams can use these resources to shape internal procedures, support tabletop exercises, and improve readiness before an incident occurs.
Combined with a framework-based assessment, these playbooks help organizations move from knowing where their gaps are to knowing what to do when a real event happens.
Incident Reporting
