This report (2009) by CARE International provides an overview of the action steps that are necessary to do before, during and after a critical security incident. It gives detailed information on those steps also regarding the first 72 hours after the incident, the first week, and the management of the aftermath. It concludes with information on the recovery phase and a summary of the protocol. It also gives further information in its appendices on various topics.