Cyber Incident Response for Small Charities

A practical course for small and medium charities without a security team. Learn how to prepare a simple incident plan, what to do in the first hour of a cyber incident, who to report to and when, how to communicate with supporters and funders, and how to run a tabletop exercise using free resources such as the NCSC's Exercise in a Box.

Who this course is for: Chief executives, operations and finance managers, IT leads, data protection leads and trustees of small and medium charities. No technical knowledge needed.

Self-paced online learning. Earn a Certificate of Completion on passing.

What you will learn

• Prepare a one-page incident plan, contact list and offline "grab pack"
• Recognise common charity incidents and respond in the first hour
• Make reporting decisions for the ICO, Charity Commission, police, NCSC and insurers
• Communicate clearly with staff, supporters, beneficiaries and funders
• Recover safely and learn from incidents
• Plan and run a tabletop exercise using free resources

Course modules

• Getting ready
• The first hour
• Reporting and communicating
• Recovery, learning and exercising