Free breach response checklist for Michigan law firms.
Create a printable first-step checklist covering client confidentiality, evidence preservation, court deadlines, insurance notification, vendor access, document systems, and ransomware response.
Use categories and contacts only. Do not enter client names, case details, passwords, or privileged communications.
The checklist emphasizes preserving emails, screenshots, logs, and affected devices before recovery changes begin.
Print the staff-first page and emergency contacts so the firm has a usable starting point when systems are down.
Frequently asked questions
Is this a full incident response plan?
No. A complete plan should identify decision-makers, validate backup recovery, document insurance requirements, define client and court communications, and be tested through a tabletop exercise.
Should staff restart an affected computer?
No. The checklist directs staff not to restart, wipe, reimage, or delete data without guidance because evidence may be lost.
