Build the organisation
Appoint an SGSecure representative; train frontline staff, encourage drills and test procedures. Fund working CCTV, risk assessment, security reviews and suitable independent audits. Establish HR support policies for an attack.
Protect systems and relationships
Use suitable software controls, inspect computers/emails, inventory sensitive data and keep backups. Maintain the BCP and partners including unions where relevant. Keep staff/next-of-kin contacts, a company information channel, spokesperson and crisis team current.
Lead the response
Assemble the crisis team, notify police and nearby outlets safely, coordinate outlet information, cooperate with building evacuation and prepare factual releases. For cyber incidents contain the impact, report appropriately, preserve logs, remove the cause with technical help and restore trusted backups.
People and business recovery
Apply HR support, trained PFA and professional referral; explain welfare measures. Verify information before contacting families, prevent rumours/discrimination and coordinate suppliers, unions and building management for reopening. Review the response plan.