An incident response plan will keep you organised and in control during a cyber attack and should contain a plan of action and contact information of those who can help resolve the issue, such as 24 hour tech support.
Once you are back to businesses, document current events so you can be prepared for a similar incident.
The National Cyber Security Centre (NCSC) provides certified organisations who can help you to create an incident response plan, as well as guidance on how to respond and recover from an incident.
Our colleagues at the South East Cyber Resilience Centre have also created a template to guide you through building your own Incident Response Plan.