Acknowledgements This document was created by the ACSC using multiple resources. The ACSC acknowledges the following resources used to develop this template:  The Australian Government Information Security Manual (ISM).  Australian Prudential Regulation Authority (APRA) Prudential Practice Guide CPG 234 Information Security June 2019 (https://www.apra.gov.au/sites/default/files/cpg_234_information_security_june_2019_1.pdf).  A Cyber Incident Response Plan template developed by efforts of the Australian Energy Sector Readiness and Resilience Working Group in 2019, specifically with support from the Australian Energy Market Operator (AEMO), Tasmanian Department of State Growth, the Victorian Government Department of Premier and Cabinet and the ACSC.  Victorian Government Incident Response Plan template 2019 (https://www.vic.gov.au/prepare-cyberincident).  Queensland Government Enterprise Architecture Incident management guideline 2018 (https://www.qgcio.qld.gov.au/documents/incident-management-guideline).  United States National Institute of Standards and Technology (NIST) Special Publication 800-61 Revision 2 Computer Security Incident Handling Guide 2012 (https://www.nist.gov/privacy-framework/nist-sp-800-61).  International Organisation for Standardisation standards:  o ISO/IEC 27035-1, Information technology – Security techniques – Information security incident management, Part 1 Principles of incident management, o ISO/IEC 27035-2, Information technology – Security techniques – Information security incident management, Part 2 Guidelines to plan and prepare for incident response, o ISO/IEC 27035-3, Information technology – Information security incident management, Part 3 Guidelines for ICT incident response operations. Cybersecurity and Infrastructure Security Agency (CISA) Cybersecurity Incident & Vulnerability Response Playbooks (https://us-cert.cisa.gov/ncas/current-activity/2021/11/16/new-federal-government-cybersecurityincident-and-vulnerability). Questions and Feedback Questions and feedback about this document should be directed to ASD Assist via email at ASD.Assist@defence.gov.au or phone at 1300 CYBER1 (1300 292 371). 3