What changed?
Note when the issue was noticed, the symptoms, and the devices, accounts, or services involved.
URGENT BUSINESS IT HELP
Something wrong?
Call us first.
Encrypted files. A compromised mailbox. A critical system offline. Let’s discuss the incident, confirm availability, and agree on the next steps.
MAKE THE FIRST CONVERSATION USEFUL
Bring the facts.
We’ll help organize the next step.
You do not need a perfect diagnosis. Start with what your team can observe.
Who needs to be involved?
Identify your internal contact, relevant vendors, and any insurer or incident adviser already engaged.
What matters most?
Explain the business impact and which operations or information need attention first.
If a payment has been sent to the wrong account, contact your bank’s fraud team immediately.IT investigation and financial recovery are separate tracks; do not wait for an IT diagnosis before notifying your bank.
A COORDINATED RESPONSE
Assess. Contain.
Recover. Strengthen.
The order and scope depend on the incident, the affected systems, and the people already involved.
- 01
Assess
Understand the symptoms, access, timeline, and immediate business impact.
- 02
Contain
Coordinate appropriate isolation, access changes, and escalation with the responsible team.
- 03
Recover
Plan remediation and recovery around available evidence, backups, and operating priorities.
- 04
Strengthen
Document findings and the practical controls that need attention afterward.
NOT AN ACTIVE INCIDENT?
Review the foundation
before the next disruption.
Explore your cybersecurity position, continuity plan, or the topics worth reviewing with your team.