Webinar: Incident Response - Rehearsing the First Hour

Incident Response – Rehearsing the First Hour

If your organisation discovered a cyber incident today, would everyone know what to do first?

The early stages can involve incomplete information, competing priorities and decisions that need to be made quickly. Knowing who to contact, who has authority to act and how to bring the right people together can help teams respond with greater confidence.

This webinar will explore how to rehearse those first steps, giving your team an opportunity to work through decisions and responsibilities before a real incident puts them under pressure.

Incident Response – Rehearsing the First Hour will focus on the conversations and actions that shape an organisation’s initial response, from raising the alarm and escalating concerns to coordinating technical teams, business leaders and external support.

We’ll also consider what happens when key people are unavailable, giving organisations useful checks to make before the Christmas break.

Date: Wednesday 18 November 2026

Time: 2:00pm GMT

Who should attend?

This session is ideal for IT managers, security teams, business leaders and anyone responsible for incident response or business continuity.

It will also be useful for colleagues in communications, HR, legal and operations who may need to support an incident response, alongside those coordinating with external IT providers.

Whether you have an established response plan or are starting to define one, the session will help you identify what your team needs to rehearse.

What we’ll cover

• Recognising when an issue needs to be escalated as a potential cyber incident
• The first decisions teams may face when the facts are still emerging
• Who needs to be involved and how to clarify responsibilities and decision-making authority
• Keeping contact lists, escalation routes and alternative communication methods ready to use
• Coordinating internal teams, external IT providers and specialist support
• Balancing containment, evidence preservation and business continuity
• Using a tabletop exercise to rehearse the first hour and identify gaps in your plan
• Checking out-of-hours cover, delegated authority and key contacts before the Christmas break

Whether you’re reviewing an existing plan or bringing colleagues together for your first exercise, this session will help you turn written procedures into a response your team has practised.

You’ll leave with a clearer view of the decisions, contacts and responsibilities to rehearse, and the gaps to address before key people take time away.

Book your place here.