Playbook Library
Know the plan before you need it
Professional incident responders do not improvise on the worst day. They follow a plan. These playbooks give parents and educators the same discipline, in plain language, so you stay calm, protect the child first, and see it through to recovery.
If it is happening now
Start here
Child in immediate danger? Call 911.
Sextortion in progress? Open the sextortion playbook. Need a hotline? Get help now.
The method
Six phases, one calm routine
Every playbook follows the same six phases, adapted from the incident-response cycle that security teams use after a breach. Learn the rhythm once and every playbook feels familiar.
- 1. PrepareGet ready before anything happens.Security teams call this: Preparation
- 2. Spot itNotice and confirm what is really going on.Security teams call this: Detection & analysis
- 3. ContainStop it getting worse. Protect the child first.Security teams call this: Containment
- 4. Clean upRemove the content, close the doors, report it.Security teams call this: Eradication
- 5. RecoverHelp the child and family heal and feel safe again.Security teams call this: Recovery
- 6. LearnReview what happened, without blame, and improve.Security teams call this: Lessons learned
Why this works. Under stress, people skip to the fix and destroy evidence, shame the child, or pay the criminal. Order matters: protect the child, keep the evidence, stop the contact, remove the content, then heal and learn.
Playbooks
For families
Sextortion: the family response playbook
A six-phase plan for when someone is blackmailing your child with intimate images, from the first hour to long-term recovery.
Parents · 10 minutes to read. Keep it open while you work.
OpenAI-generated fake images (“nudify” and deepfakes): the response playbook
What to do when a fake sexual image of a child is made or shared using AI, even though the child never took a photo.
Parents · Educators · 8 minutes
OpenSuspected online grooming: the response playbook
What to do when an adult or older stranger is building a private, secretive relationship with your child online.
Parents · 8 minutes
OpenHacked or taken-over account: the response playbook
How to regain control of a child’s account, check what the intruder saw, and prevent a repeat.
Parents · 10 minutes
OpenA teen is missing, or may be being recruited: the response playbook
What to do when a young person disappears or you suspect someone is recruiting them into trafficking, including the first hours that matter most.
Parents · Educators · 8 minutes
OpenPlaybooks
For schools and educators
When a student tells you: the educator disclosure playbook
A six-phase plan for the first conversation and the hours after a student discloses abuse, exploitation, sextortion or trafficking.
Educators · 8 minutes to read. Print it for your staff room.
OpenIntimate image or sextortion on campus: the school incident playbook
A full incident-response runbook for a school when an intimate image of a minor is circulating or a student is being blackmailed, with roles and a first-60-minutes timeline.
Educators · 12 minutes to read. Run it with your team.
OpenField guides
Skills that make every playbook work
Borrowed from investigators and intelligence analysts, translated for people who are not either.
Incident communications: parent, staff, student and media templates
Plain-language templates and ground rules for the messages a school sends after an exploitation or image incident.
Educators · 6 minutes. Copy the templates and fill the brackets.
OpenRun a 45-minute tabletop exercise for your school
A facilitator’s guide to practicing your response to an exploitation or image incident with administrators, counselors, IT and the school resource officer.
Educators · 45 minutes to run, 15 minutes to prepare.
OpenIs this real? Grading what you read and who told you
A simple way to judge a message, a stranger or a viral warning before you act on it: rate the person and the claim separately.
Parents · Educators · 6 minutes
OpenThe grooming chain: what adults can notice, and where to break it
Seven stages of how online predators and traffickers escalate, seen from a defender’s side, with a practical way to interrupt each one.
Parents · Educators · 8 minutes
OpenListening to a child who tells you something hard
How to receive a disclosure calmly, avoid putting words in a child’s mouth, record what was said, and hand off to trained professionals.
Parents · Educators · 7 minutes
OpenPreserving evidence: a guide for families
What to save, what never to save, and how to keep a clean log so police and NCMEC can act on what you found.
Parents · 6 minutes
OpenFamily digital security: share less, separate more
Practical security habits for a household, in plain words, with a checklist by age.
Parents · 8 minutes
OpenA 20-minute “what would we do?” family drill
Three short scenarios to talk through at the kitchen table so everyone knows the plan before it is real.
Parents · 20 minutes
OpenThe family response plan card
A one-page, fill-in, printable card for the fridge with who to call, your code word, and a six-step plan.
Parents · 10 minutes to fill in
OpenBlameless after-action review
A short, kind meeting that turns what happened into a better plan without blaming the child or anyone else.
Parents · Educators · 30 minutes
OpenThreat briefs
What the threat looks like right now
Short, sourced, and honest about what we do not know.
Threat brief: financial sextortion of minors
A one-page, sourced assessment of financial sextortion, in the format analysts use: bottom line first, then evidence, confidence, and what to do. As of November 14, 2026.
Parents · Educators · 4 minutes
OpenBuilt by practitioners
Why AIP can offer this
AIP’s co-founder Ken Walther spent 27 years with the Central Intelligence Agency on counterterrorism, narcotics and espionage operations. Chief Technology & AI Security Officer Joey Victorino has spent more than a decade in digital forensics and incident response. The habits that make their work effective, such as grading sources, preserving evidence, and reviewing without blame, are the same habits that help a family through a crisis.
How you can help. We need an attorney, a licensed clinician, educators and industry advisors to review this library. If that is you, see careers and volunteering. Legal references, such as mandated reporting, should always be confirmed with your own counsel or district. See our leadership and technology pages.
Safety is built before the crisis
Pick your part and see it through. Prevention works when people follow through.