Skip to main content
U.S. flag

An official website of the United States government

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Information on the 2024 Campaign is available now.  Click here to find out more.

Preparing for a Cyber Incident

Cyber incidents and data breaches continue to proliferate globally, targeting organizations across all industries and sectors. Worldwide monetary loss to cybercrime is measured in the hundreds of billions. Our transnational cybercrime investigation cases in 2018 accounted for $1.9B in actual financial losses and $6.8B in potential losses averted due to law enforcement action.

We have extensive experience in cyber incident response and the subsequent criminal investigations, and we offer this guide outlining basic steps an organization can take before, during and after a cyber incident.

 
Preparing for a Cyber Incident: An Introductory Guide

An Introductory Guide


This guide describes what actions organizations should take to cultivate an understanding of the technological and regulatory limitations, responsibilities, and resources available to them, and how to apply the acquired knowledge to their operations. This guide does not constitute legal advice and is only for reference purposes.

 

 
Preparing for a Cyber Incident: A Guide to Ransomware

A Guide to Ransomware


This guide defines ransomware and describes what actions organizations should take to prepare, prevent, and respond to ransomware attacks.

 

 
Preparing for a Cyber Incident: Contacting Law Enforcement

Contacting Law Enforcement

USSS Stars

This guide describes what organizations should know about contacting law enforcement in general and the Secret Service specifically during a cyber incident.

 

 

 
Preparing for a Cyber Incident: Reporting Cyber Incidents to the Federal Government

Reporting Cyber Incidents to the Federal Government


This guide describes the roles and responsibilities of the Federal government during cyber incidents, and what to report to specific Federal agencies.

 

 
Preparing for a Cyber Incident: A Guide to E-Skimming

A Guide to e-Skimming


This guide defines e-Skimming and describes what actions organizations should take to protect from e-Skimming.

 

 
Preparing for a Cyber Incident: A Guide to Business Email Compromises

A Guide to Business Email Compromises


This guide defines Business Email Compromises (BEC) and describes what actions organizations should take to prevent and to respond to BECs.

 

 
Preparing for a Cyber Incident: Anatomy of a Business Email Compromise

Anatomy of a Business Email Compromise


This guide describes the steps criminals typically take in planning BECs.