Department of Justice (DOJ) Best Practices for Victim Response and Reporting of Cyber Incidents

Any Internet-connected organization can fall prey to a disruptive network intrusion or costly cyber-attack. A quick, effective response can prove critical to minimizing the resulting harm and expediting recovery. The best time to plan such a response is before an incident occurs. Department of Justice (DOJ) Best Practices for Victim Response and Reporting of Cyber Incidents.

https://www.justice.gov/sites/default/files/criminal-ccips/legacy/2015/04/30/04272015reporting-cyber-incidents-final.pdf