Quick Reference Handbook

The Incident Response “Quick Reference Handbook” (QRH) contains a series of easy-to-use follow ‘playbooks’ and ‘tips’ that can be used to respond to common cyber incident types. The QRH is designed to complement a Cyber Incident Response Plan.

Playbooks for Common Cyber Attack Types


Business Email Compromise

Compromised Passwords

Social Engineering and Phishing Attacks

Tips for Common Cyber Controls

NIST Cybersecurity Framework

Operating Systems

Software Patches and Updates

The Internet of Things

Mobile Application Security

Multi-factor and Two-factor Authentication

Password Managers

Cloud Identity

Cloud Computing Incident Response

Cyber Security Awareness

Privacy Education

New Zealand Privacy Law Update

Cybersecurity Toolkit for Small to Medium-Sized Businesses

Social Media – Privacy

Social Media – Harmful Content

Identity Theft

Computer Crimes and the Law

NZ Cyber Security Strategy 2019

Cyber Incident Detection

Communication during an Incident Response

Security when working from home

Threat Actors

COVID-19’s impact on cybercrime and cybercriminals

Remote Forensic Investigations


The Quick Reference Handbook ‘Playbooks’ and ‘Tips’ published by Incident Response Solutions are intended to be a high-level summary containing some of the most important Forensic and Cyber Security information that can be followed in the event of a suffering a cyber incident.

Why do we publish these ‘Playbooks’? Because we want to keep you up to date with the latest Forensic and Cyber Security information, so that you aren’t caught by surprise – and you’ll know about risks and changes before they become problems.

For readers wishing to receive additional Forensic and Cyber Security information, we recommend subscribing to the NZ Incident Response Bulletin and Alerts.

Please contact us at support@incidentresponse.co.nz for further information.

Traffic light protocol

The traffic light protocol (TLP) is a set of designations used to ensure that sensitive information is shared with the correct audience.

All playbooks on this page are considered ‘White’, i.e. the information carries minimal or no foreseeable risk of misuse, in accordance with applicable rules and procedures for public release.