Start here
Incident Response Basics for IT Teams
A plain-language overview of the incident response cycle: preparing, detecting, containing, recovering and learning from security events in a small IT team.
Running IT
Incident Response
Preparing for, handling and learning from security incidents.
Containing an Incident Without Making It Worse
General principles for limiting the spread of a security incident while preserving the evidence you will need to understand it and recover properly.
How to Write an Incident Response Plan
What a written incident response plan should contain, who owns each part, and how to keep it short enough that people will actually use it under pressure.
Malware Types Explained
Viruses, worms, trojans, ransomware, spyware and other malicious software explained in plain language, including how each type behaves and spreads.
Recognizing the Signs of a Compromised Account
Common warning signs that an account is no longer under its owner's control, what they might mean, and sensible first steps if you suspect a problem.
Running a Post-Incident Review
How to run a blame-free post-incident review: preparing, building a timeline, finding contributing factors, and turning findings into follow-up actions.
Security Awareness Training for Staff
What useful security awareness sessions for staff cover, how to keep them practical and respectful, and how to tell whether the training is helping.
Understanding Phishing and Social Engineering
How attackers manipulate people through phishing, phone calls and impersonation, the psychological tricks they rely on, and practical ways to spot and report them.
Vulnerability Scanning and Patching Priorities
How vulnerability scans work, how findings are ranked by severity and real-world risk, and how teams decide what to fix first with limited time.
Related topics
More in running it
Cybersecurity Basics Everyday security habits for passwords, networks and online life. IT Operations Help desks, service management and keeping track of equipment. Governance and Policy Oversight, risk, written policies and training for staff. Projects and Vendors Delivering IT projects and working with outside partners. Identity and Access Who can sign in to what, and how access is granted and reviewed. Privacy and Data Protection Handling personal and sensitive information responsibly.