Resources · Crisis
Ransomware, intrusion, data leak: when an incident strikes, the temptation is to act fast, in every direction. That is precisely what to avoid. Method beats speed. Here are the priorities for the first hours.
First conversation free, confidential and with no commitment.
The reflex for the first hours is not to do everything fast: it is to do the right things. Six decisions in sequence, rather than ten hasty moves.
In a crisis, speed is not a method. The right order is.
A cyber crisis is not won in a sprint. Every move in the first hours shapes what follows: the analysis, the insurance, the legal side, the recovery. A move that destroys evidence cannot be undone.
Our role: keep track of the decisions with you, without dramatising and without leaving you alone. We never promise a guaranteed result; we commit to a method.
Before communicating and rebuilding, three moves hold the crisis together: contain without destroying, decide from a single point, record everything.
Containing the spread is legitimate: isolating machines, cutting off access. But doing it without method can destroy the evidence needed for the analysis and the insurance claim. Stabilising and preserving go hand in hand.
A crisis is managed from a single point: who decides, who speaks, who acts. Management, the technical team, legal, the insurer and, if necessary, the authorities must move forward on the same thread, not in scattered order.
Keep a timestamped crisis log: findings, decisions, actions. It is invaluable for the insurance, the legal side and the lessons learned, and it protects senior management.
Once the first moves are in place, two workstreams take over, without haste, continuing the same thread of decisions.
Internally and externally, controlled communication prevents rumours and mistakes. A measured, accurate message is better than a hasty reaction.
Once the emergency is under control, the remediation and recovery plan takes over. That is Galyct Pro’s territory for businesses; on evidence and coordination, the firm steps in directly.
Don’t face it alone. Don’t delete anything, don’t pay anything, and don’t give in to haste: badly preserved evidence is worthless. Describe the situation to us: we call you back quickly and make the first decisions with you.
often decide what happens next in an incident. The right reflex is not to do everything fast: it is to do the right things. That is what we are here for.
A first conversation with an expert about your situation, no commitment, no sales pitch. We make the first decisions with you.
