Didn't ask for it? Don't approve it
A sign-in prompt you didn't start means someone else has your password.
Checklist · Security habits
If we get hacked: who does what
Fill this in now, while things are calm. Keep a printed copy, because your computers may not work on the day you need it.
Free to print and share
One page, US Letter, in color. Tick the boxes and type on the lines right in your browser or PDF reader, then save or print it.
Filling in online works in Chrome, Edge, Safari and Adobe Reader. Your answers stay on your computer.
Want all 34? Get the whole pack by email or browse the library.
What's inside
The full text
First steps
- 1
Don't turn computers off.
Unplug network cables and turn off Wi-Fi instead.
- 2
Call your IT support.
Day or night. Their number is on the right.
- 3
Call your cyber insurance
before you pay or hire anyone. Many policies require it.
- 4
Don't pay or reply to the attackers.
Let your IT support and your insurer handle any contact.
- 5
Talk by phone, not company email.
Email may be watched.
- 6
Write down what you saw, with times.
Photos of screens help.
Our contacts
IT support phone (after hours)
Decision maker
Their cell
Backup decision maker
Their cell
Cyber insurance company
Policy number
Claims phone
Bank fraud line
Attorney
Who talks to clients
Internet provider + account
If money or personal data may be involved
- Call the bank's fraud line to stop or recall payments
- Report it at ic3.gov (the FBI's internet crime center)
- Ask your attorney about notice rules for client data
- Keep a log of every call and decision
Last reviewed (date and initials)
Security habits
More printables like this
Lock it when you leave
An unlocked screen is an open door. It takes one second to close it.
Passphrases beat passwords
Long and easy to remember is stronger than short and complicated.
Questions about anything in here?
Our team helps local businesses with exactly this every day. A 15-minute call is free.