For the past few years we've been investigating non-technical aspects of cyber resilience and incident readiness.
We've crowdsourced a number of resources including cyber attack incident action cards and a starter guide for school business managers wishing to create (or check) a business continuity plan for a cyber incident. Contributors included business, ransomware survivors and police.
The resources are available in various formats (including editable ones) at Cyber incident resources | North Eastern ICT Partnership (neict.org).
I'd welcome nay feedback.
G.