--- title: "What to Do in the First 60 Minutes of a Cyberattack - Blogs on IT Support and Cybersecurity for Small Business" description: "When a cyberattack hits, panic is not a plan. Learn the key components of an Incident Response Plan so your team is ready to act before a crisis strikes." url: "https://colemantechnologies.com/blog/what-to-do-in-the-first-60-minutes-of-a-cyberattack" date: "2026-06-07T08:56:19+00:00" language: "en-GB" --- ## Blogs on IT Support and Cybersecurity for Small Business Insights on cybersecurity, AI, and IT strategy to help business leaders reduce risk, improve performance, and make better technology decisions. [ Categories ](https://colemantechnologies.com/blog/categories "Categories") [ Tags ](https://colemantechnologies.com/blog/tags "Tags") [ Categories: All Categories ](https://colemantechnologies.com/javascript:void(0); "Categories") Search...Suggested keywords [ x ](https://colemantechnologies.com/javascript:void(0);) # What to Do in the First 60 Minutes of a Cyberattack [Coleman Technologies Blog](https://colemantechnologies.com/blog/categories/blog) [Security](https://colemantechnologies.com/blog/categories/security) [Coleman Technologies Admin](https://colemantechnologies.com/blog/blogger/darren-coleman) Wednesday, 13 August 2025 [ ![What to Do in the First 60 Minutes of a Cyberattack](//colemantechnologies.com/images/easyblog_shared/August_2025/08-13-25/b2ap3_large_TimeIT46624263_400.jpg) ](//colemantechnologies.com/images/easyblog_shared/August_2025/08-13-25/TimeIT46624263_400.jpg "What to Do in the First 60 Minutes of a Cyberattack") Cyberattacks are not to be underestimated. The damage that they can do—even in the first hours—is considerable. This means you need to have a strategy to respond to these incidents, conveniently called an incident response plan. This procedure should be both tested and documented, preparing you to withstand any cyberattack with minimal damage or disruption. As you might expect, the first hour or so will be a crucial period during this process. Let’s go over what you need to do. ## Essential Actions to Take in the First 60 Minutes of a Cyberattack To be clear, this is not the stage at which you should try to fix everything. This is when you need to be in damage control mode and prepare your recovery measures. ### What You Need to Do: **Contain the Threat** Before anything else, you need to keep whatever it is that’s impacting your systems from spreading further. That might mean shutting down a server or disconnecting a workstation from the network. Once you’ve stopped the spread of the attack, you can move on to the next step. **Communicate with Contacts** You should have a communication tree laid out and planned for these kinds of events, specifically one that outlines who is responsible for what. Who’s the person who informs the boss of what’s going on, and who reaches out to your business’ insurance provider and legal representation? Critically, someone needs to reach out to your IT provider (ideally, us), so who is assigned to do so? Getting everyone up to speed will be crucial to successfully navigating this kind of event. **Control Communication** As you’re sorting through the cyberattack, ensure that your business has a single point of contact handling all public communications regarding the incident. Outside of that person, your staff should not speak publicly, which will help avoid misinformation being spread and prevent your business from being liable. **Create a Record** Ensure that you document everything, including when the incident was discovered, what data was breached, and the steps taken to resolve the incident. Critically, wait for IT’s go-ahead before deleting any data from or even turning off an infected machine, as these actions can destroy valuable evidence. ## This Barely Scratches the Surface of What an Incident Response Plan Should Look Like This critical process is not one to neglect, and the only thing more important than having such a plan is to have the security that prevents you from having to use it. We can help on all fronts. We’ll not only implement strong protections to keep your business safe, but we’ll also help you craft, test, and implement all the plans that a business needs, including an incident response plan. Ready to get started? Give us a call at PHONENUMBER. [ ](https://colemantechnologies.com/javascript:void(0);) [ ](https://colemantechnologies.com/javascript:void(0);) [ ](https://colemantechnologies.com/javascript:void(0);) Tags: [Security](https://colemantechnologies.com/blog/tags/security) [Best Practices](https://colemantechnologies.com/blog/tags/best-practices) [Ransomware](https://colemantechnologies.com/blog/tags/ransomware) [×](https://colemantechnologies.com/javascript:void(0);) Stay Informed When you subscribe to the blog, we will send you an e-mail when there are new updates on the site so you wouldn't miss them. Your Name E-mail Address [ Use Version Control for More Effective File Manage... ](https://colemantechnologies.com/blog/use-version-control-for-more-effective-file-management) [ Coleman Technologies Sets the Standard for Secure,... ](https://colemantechnologies.com/news-a-events/coleman-technologies-sets-new-standard-for-secure-and-strategic-ai-use-with-bsn-certification) About the author [ ![Coleman Technologies Admin](https://colemantechnologies.com/media/com_easyblog/images/avatars/author.png) ](https://colemantechnologies.com/blog/blogger/darren-coleman) [Coleman Technologies Admin](https://colemantechnologies.com/blog/blogger/darren-coleman) [ ](https://colemantechnologies.com/blog/blogger/darren-coleman) Author's recent posts [More posts from author](https://colemantechnologies.com/blog/blogger/darren-coleman) [ Tuesday, 05 May 2026 Darren Coleman Featured in Boss Today on AI Literacy and Human Judgment ](https://colemantechnologies.com/blog/darren-coleman-bosstoday-ai-literacy) [ Monday, 06 April 2026 How Cloud IT Services Are Transforming Business Continuity ](https://colemantechnologies.com/blog/how-cloud-it-services-are-transforming-business-continuity) [ Monday, 06 April 2026 Darren Coleman Featured in USAWire on Why Businesses Need an AI Strategy ](https://colemantechnologies.com/news-a-events/darren-coleman-usawire-ai-strategy) ## Schema ```json { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://colemantechnologies.com" }, { "@type": "ListItem", "position": 2, "name": "Blog", "item": "https://colemantechnologies.com/blog" }, { "@type": "ListItem", "position": 3, "name": "Coleman Technologies Admin", "item": "https://colemantechnologies.com/blog/blogger/darren-coleman" }, { "@type": "ListItem", "position": 4, "name": "What to Do in the First 60 Minutes of a Cyberattack", "item": "https://colemantechnologies.com/blog/what-to-do-in-the-first-60-minutes-of-a-cyberattack" } ] } ```