Crisis Management Guide
Volume 2
By the Intrinsec CERT
What you will find in this volume
- Role and composition of the qualification unit: technical and business aspects to answer the question "Are we in a crisis?"«
- Impact/urgency matrix and priority levels (low → very high) for deciding on escalation
- Escalation scale and process (reporting → qualification → isolation → CERT call → crisis cell activation → RETEX)
- "Red button procedure" framework and isolation criteria/prerequisites (workstations, sites, overall isolation)
- Practical isolation guides (methods: EDR, firewall, switch consoles, physical disconnection) and examples of isolation guides
View all volumes
Our expertise
- 24/7 emergency response in case of attack
- Direct line to CERT experts
- Prior knowledge of your context
- Lessons learned and improvement plan
- Cyber crisis unit that can be activated quickly
- Support for strategic decision-making
- Crisis communication coordination
- Post-crisis reinforcement plan
- Rapid qualification and containment of the attack
- Forensic and technical investigations
- Immediate corrective actions on the IS
- Post-incident report and recommendations
- Proactive detection of hidden threats
- In-depth analysis of logs and telemetry
- Regular retrohunting campaigns
- Blind spot detection closure
- Training based on real crises
- Practical exercises for operational teams
- Sustainable strengthening of internal skills
- Alignment with cyber standards and requirements
Trusted partner
A guarantee of excellence recognized by national authorities
The Intrinsec CERT, qualified PRIC High (incident response) The ANSSI-run cyber incident response center is recognized for its high level of expertise and operational experience, particularly in complex and targeted attacks. It operates 24/7 to support organizations in managing major incidents, technical remediation, crisis coordination, and post-incident learning to sustainably improve the resilience of their information systems.
Contact Intrinsic
Do you want to strengthen the security of your information system, ask a question or exchange information with an expert?
Intrinsec puts its expertise at the service of your cybersecurity.
Whether you are a company, a partner, or a public organization, Our team of experts is here to help you to address current cybersecurity challenges.
Send us your request using the form below.
Trusted partner:
