What are the best practices for companies to follow after a cyber incident?

Updated as of: 28 April 2025
UK retailer M&S recently suffered a cyber-attack, with online orders, remote workers, and contactless payments all impacted. What are the best practices for companies to follow in the wake of a cyber incident?