ECHOBASTION / PRINTABLE FIELD GUIDE

Your first incident contact.

A preparation checklist. Follow your organisation’s incident process.

1. Record the first observation: date, time, time zone.
2. Describe affected systems at a high level.
3. State the business impact you can confirm.
4. Keep a timeline of actions and decisions already taken.
5. Name an authorised contact and reply address.
6. Leave out passwords, tokens, personal records, and attachments.

Contact: Adam@echobastion.org