Incident Response Playbook - Business Email Compromise

Respond quickly to financial fraud and email impersonation attacks.

Business Email Compromise (BEC) attacks target finance teams, executives, and vendors to trick organizations into sending fraudulent payments. This playbook provides a structured response process to minimize financial losses and investigate account compromise.

What’s Included

• BEC detection indicators

• Financial fraud response procedures

• Bank recall guidance

• Email account investigation steps

• Credential compromise containment procedures

• Financial control improvement recommendations

Who This Is For

Organizations that process:

• Wire transfers

• Vendor payments

• Payroll changes