The first 24 hours of a cyber incident. A practical playbook 

This report is a concise, actionable 24-hour incident response playbook for SMBs that details how to confirm and contain a breach, preserve evidence, notify internal stakeholders, engage external IR and regulators where required, craft internal/external communications, implement initial technical controls (network segmentation, MFA, credential resets, log preservation), coordinate legal and PR responses, support staff well-being, and prepare for eradication, recovery, and lessons learned, concluding with a clear checklist to guide execution.