ProSec Global
Crisis Management

Decide in a crisis.
Keep the company able to act.

A cyberattack or targeted sabotage can affect operations, technology and executive management at the same time. Crisis management connects business decisions with incident response, IT forensics and recovery.

Advising executive management | ProSec Global

Leadership needs a shared picture of the situation.

ProSec Global advises executive management on crisis preparedness and during a crisis. The focus is on business priorities, decision-making authority and the interaction of the areas of responsibility. Professional deployment planning and operational handling lie with the responsible teams and units.

Business priority
Which services must be continued or restored first.
Ability to decide
Who decides on what basis, and when the situation is reassessed.
Interaction
How leadership, operations, technology, communication and other specialist functions act in a coordinated way.
Tim SchughartGroup CEO | ProSec Global
Confidential conversation →
Interrelationships

Several tasks run at the same time.

Technical containment, operational ability to act and business decisions influence one another. New findings therefore have to flow back into all areas of responsibility involved.

Shared situation picture | coordinated decisions

Executive management

Business priorities, resources, approvals and overarching communication.

Advice: ProSec Global

Operations & business departments

Continuation of critical services, substitute processes and the professional prerequisites for recovery.

Your operational and departmental managers

Technical handling

Contain the cyberattack, secure digital traces and support restoration.

Advice & deployment: ProSec Defense
Ongoing coordinationNew findingsDecisionsApprovalsRecovery
Preparation and exercises create the framework; the concrete response follows the situation. Decision-making authority remains with your organization. In the case of physical events, the respectively responsible security and response functions are involved.
Specialist level | ProSec Defense

Incident response, IT forensics and recovery.

Operational cyber incident handling is a specialist strand of its own below crisis management. In an acute deployment, forensics runs in parallel with containment, but it can also be required independently of an acute crisis, for example in cases of data exfiltration, suspected insiders or questions of digital evidence.

Specialist tasks in a cyber incident

Incident response

Contain the situation technically, identify affected systems, stop the spread and coordinate the next operational steps.

ProSec Defense

IT forensics

Secure digital traces, reconstruct the course of events and the timeline, and reliably determine data exfiltration and affected systems.

ProSec Defense

Recovery & hardening

Bring systems back into operation in a controlled way, address technical causes and derive protective measures for ongoing operations.

ProSec Defense