Detailed guidance to support specific council services and situations during a cyber incident.
Use these modules if you are responding to a cyber incident affecting a specific council service. They provide more detailed guidance on how to maintain and recover critical council services, alongside the core grab bag content.
Service specific modules
Use these modules where a cyber incident is affecting a specific council service.
-
Adults’ services
This module covers core service activity such as provision of care services, safeguarding, managing risks to sensitive data, and engagement with care providers and other external partners such as the NHS and Care Quality Commission.
-
Children’s services
This module covers core service activity such as safeguarding, child protection, managing risks to sensitive data, and engagement with external partners such as care providers, the Department for Education and Ofsted.
-
Finance
This module covers finance and treasury management, income collection, payments to residents and suppliers, and other finance functions. This includes management of risk of fraud while normal systems and controls are impacted, and engagement with external partners and suppliers.
Situational guidance
Use these modules where the nature of your incident or operating environment creates additional complexity.
-
Ensuring your incident response reflects reality
Use this module if your incident involves unclear ownership, or complex organisational arrangements. This often arises when councils operate across shared services, partners or suppliers, or where roles, leadership or governance arrangements are changing and not fully established.
About this section
These modules are designed to be used alongside the main grab bag guidance, and should be used alongside your business continuity and emergency planning arrangements.
You do need to use all modules. Focus on those that are most relevant to your service or situation.
Additional service specific and situational modules will be added over time.