Initial triage
Collect essential information and prioritize without requiring a complex form.
Triage · Coordination · Response
When an incident occurs, the first step must be clear.
We created a simple entry point for requesting support, organising priorities and preparing an official notification where applicable.
The problem
Incident pressure must not make the process more confusing.
Evidence must be preserved, impact understood, containment performed safely, stakeholders coordinated and communications completed without confusing technical support with an official notification.
What we structure
An approach connected to the organization's reality.
Response coordination
Organize responsibilities, actions, communication and escalation.
Evidence preservation
Guide the collection and protection of material relevant to analysis and decisions.
Notification support
Structure information for MyCiber and other applicable official channels.
Method
From context to ongoing support.
The specific scope is adjusted to the organization's size, maturity, risk and internal capability.
- 01Receive and validate
- 02Assess impact and urgency
- 03Contain and preserve
- 04Coordinate recovery and communication
- 05Record and learn
Expected outcomes
What should improve after the intervention.
- An unambiguous first step
- Prioritized actions
- Preserved evidence
- Better-prepared communications
Clear boundaries
What the intervention neither assumes nor transfers.
- Technical support does not replace competent authorities, criminal investigation, legal advice or official notification.
- Intrusive or containment actions require authorization and assessment of operational impact.
- The depth of analysis depends on the evidence, access and condition of the systems.
Next step by maturity
Move forward from where you are.
Choose the action that matches the organization's current clarity and capability.
01 · Understand
I am still framing the subject.
Begin with related information and validate assumptions before selecting an intervention.
Explore knowledge → 02 · StructureI already recognize the problem.
Review the intervention, method, deliverables and boundaries to organize internal priorities.
Review the approach → 03 · ActI need to move forward with context.
Tell us only what is essential. Initial triage helps organize the next steps.
Request CSIRT support →Next step
Are you facing an incident or unable to assess the situation?
Tell us only what is essential. Initial triage helps organize the next steps.