A clear diagnosis
You know what happened and what is at stake, without dramatisation.
The firm · Assessment & doctrine
Assess an incident before taking heavy action.
We check what has actually been observed, what remains to be confirmed and what material is available. At the end of the framing stage, you know which checks are useful, which are not, and which deliverable is relevant.
First conversation free, confidential and with no commitment.
Situation described
Ransomware · encrypted servers
Urgency
High · 48 h
Severity
Data at stake
Evidence
To be preserved
Recommended path
Firm · forensics & crisis →
01 · THE METHOD
Why start with an assessment?
Acting without understanding means risking destroying evidence, making the incident worse or paying for nothing. The firm first makes a clear diagnosis, in the right order.
1ListenGathering the facts, in your words, without judgement.
2ReconstructTimeline of the incident and the scope actually affected.
3Take stockWhat has already been done, so as not to make things worse or erase anything.
4Measure the urgencyPossible spread, what is at stake in the next few hours.
5Assess the severityData, responsibilities and obligations at stake.
6DirectThe right path: the firm, Galyct Pro or Galyct Perso.
THE DOCTRINE
Keep the ability to understand tomorrow.
The assessment applies a principle from the CODEX, our doctrine: “At the start of an incident, the priority is not to understand everything immediately, it is to keep the ability to understand tomorrow, without having destroyed the evidence or lost control of the decisions.”
02 · WHAT WE LOOK AT
The facts on one side, what is at stake on the other
Nothing is decided on an assumption. We separate what actually happened from what is at stake, because a hasty move can destroy evidence before anyone has even examined it.
The facts
What we reconstruct
- The facts, in the order in which they occurred
- The scope affected: accounts, machines, data
- The actions already taken, and by whom
- The evidence still available and to be preserved
What is at stake
What we measure
- The actual severity and the possible spread
- The data and responsibilities at stake
- Deadlines and obligations: bank, insurer, authorities
- The risk of destroying evidence by acting too fast
03 · WHAT THE ASSESSMENT GIVES YOU
A documented decision, from the outset
At the end of the assessment, you do not have a promise: you have a clear reading of the situation and a direction you can stand behind.
The right immediate reflexes
What to do (and above all what not to do) in the first hours, to preserve the evidence.
The right path
A clear direction towards the engagement that genuinely fits: the firm, Galyct Pro or Galyct Perso.
04 · OUR HONESTY
What we commit to, what we do not promise
A serious firm is recognised as much by what it refuses to promise as by what it knows how to do.
What we commit to
A clear framework
- A free and confidential first conversation
- A method and a single point of contact
- We never ask for your codes or your passwords
- Evidence and clarity at the centre of every decision
What we do not promise
A best-efforts obligation
- No guaranteed result: no one serious promises one
- No magic recovery of data that has already been destroyed
- No one-size-fits-all solution applied to every case
- We do not dramatise the situation to make a sale
A situation to assess right now?
Don’t face it alone. Don’t delete anything, don’t pay anything, and don’t reset anything in a hurry: badly preserved evidence is worthless. Describe the situation to us: we frame it with you and make the first decisions together.
A situation to frame? Let’s talk.
Briefly describe what is happening. An expert assesses your case, measures its urgency and points you in the right direction, with no commitment and no sales pitch.