PrepareCT.com | GrowCT.com | CT Small Business Development Center • CTSBDC 31
Disaster Recovery Toolkit
for Small Business
During a Cyber Attack
Immediate Actions
• Check to make sure the soware on all of your systems is up-to-date.
• Run a scan to make sure your system is not infected or acting suspiciously.
• If you find a problem, disconnect your device from the Internet and perform a full system restore.
At Home
• Disconnect your device (computer, gaming system, tablet,
etc.) from the Internet. By removing the Internet connection,
you prevent an attacker or virus from being able to access
your computer and perform tasks such as locating personal
data, manipulating or deleting files, or using your device to
attack others.
• If you have anti-virus soware installed on your computer,
update the virus definitions (if possible), and perform
a manual scan of your entire system. Install all of the
appropriate patches to fix known vulnerabilities.
At Work
• If you have access to an IT department, contact them immediately. e sooner they can investigate and clean
your computer, the less damage to your computer and other computers on the network.
• If you believe you might have revealed sensitive information about your organization, report it to the appropriate
people within the organization, including network administrators. ey can be alert for any suspicious or
unusual activity.
At a Public Place (library, school, etc.)
• Immediately inform a librarian, teacher, or manager in charge. If they have access to an IT department, contact
them immediately.
• Immediate Actions if your Personally Identifiable Information (PII) is compromised:
PII is information that can be used to uniquely identify, contact, or locate a single person. PII includes but is not
limited to:
• Full Name
• Social security number
• Address
• Date of birth
• Place of birth
• Driver's License Number
• Vehicle registration plate number
• Credit card numbers
• Physical appearance
• Gender or race
