The National Cyber Security Centre (NCSC) offers new guidance to help organisations manage and recover from highly disruptive cyber attacks through a three-stage framework: immediate response, building a recovery programme focused on restoring core business functions, and long-term rebuilding to enhance security and resilience. The guidance emphasizes the importance of rapid defensive actions, engaging expert incident responders, and business-led recovery efforts, while also advocating for proactive preparation including regular testing and practice of incident response plans. This approach aims to support organisations in minimizing disruption, maintaining critical operations, and emerging stronger after cyber incidents.
https://www.ncsc.gov.uk/blogs/when-cyber-attacks-happen-helping-organisations-recover