Crisis Management Guide
Volume 1
By the Intrinsec CERT
What you will find in this volume
- Definition and characteristics of a cyber crisis
- The 7 phases of a crisis (normal operation → events → incubation → trigger → rescue → readjustments → return to normal)
- Preparation actions: updates, network segmentation, directory management, EDR/SIEM/SOC, offline documentation.
- Governance, BIA, PCA/DRP, log/incident policy, subcontractor mapping and crisis management plans.
- Objectives of the rescue and role of the forensic expert regarding the date of intrusion, point of entry and actions of the attacker.
View all volumes
Our expertise
- 24/7 emergency response in case of attack
- Direct line to CERT experts
- Prior knowledge of your context
- Lessons learned and improvement plan
- Cyber crisis unit that can be activated quickly
- Support for strategic decision-making
- Crisis communication coordination
- Post-crisis reinforcement plan
- Rapid qualification and containment of the attack
- Forensic and technical investigations
- Immediate corrective actions on the IS
- Post-incident report and recommendations
- Proactive detection of hidden threats
- In-depth analysis of logs and telemetry
- Regular retrohunting campaigns
- Blind spot detection closure
- Training based on real crises
- Practical exercises for operational teams
- Sustainable strengthening of internal skills
- Alignment with cyber standards and requirements
Trusted partner
A guarantee of excellence recognized by national authorities
The Intrinsec CERT, qualified PRIC High (incident response) The ANSSI-run cyber incident response center is recognized for its high level of expertise and operational experience, particularly in complex and targeted attacks. It operates 24/7 to support organizations in managing major incidents, technical remediation, crisis coordination, and post-incident learning to sustainably improve the resilience of their information systems.
Contact Intrinsic
Do you want to strengthen the security of your information system, ask a question or exchange information with an expert?
Intrinsec puts its expertise at the service of your cybersecurity.
Whether you are a company, a partner, or a public organization, Our team of experts is here to help you to address current cybersecurity challenges.
Send us your request using the form below.
Trusted partner:
