First orientation after a suspected incident
Incident-response triage and first digital guidance
NIWO helps individuals and small organizations structure the first decisions after a suspected cyberattack. The initial conversation is free digital guidance, not a 24/7 hotline, forensic investigation, legal advice, managed response retainer, or guarantee of containment or recovery.
Who it is for
- Individuals who suspect an account or device compromise
- Startups and SMEs without an established incident-response contact
- Decision-makers who need to identify the safest immediate next step
Typical situations
- Suspicious account activity, phishing, or possible credential theft
- Unexpected system behavior or a possible data exposure
- Uncertainty about evidence preservation, isolation, and who to contact
What is included
- A structured initial description of what is known and unknown
- Prioritization of immediate damage-limitation and evidence-preservation steps
- Guidance on suitable specialist, provider, insurer, legal, or authority escalation
What is not included
- Guaranteed emergency availability or response times
- Digital forensics, malware eradication, legal advice, or representation
- A promise to contain, restore, or recover systems
How it works
- Share only the minimum non-sensitive facts needed for orientation
- Separate observed facts from assumptions and identify urgent risks
- Agree on safe immediate actions and the appropriate next professional contact
Likely deliverables
- A concise written priority list when appropriate
- Documented unknowns and escalation triggers
- Pointers to suitable next-step resources or specialists
Prerequisites
- Authority to discuss the affected account or system
- No credentials, private logs, patient data, or unnecessary incident details by email
- Emergency or immediate physical-safety risks must go to the appropriate emergency service
Availability
Initial guidance can be provided remotely from Germany. Availability is agreed individually and is not continuous emergency coverage.
Related educational topics
Next step
Request initial incident guidance
Request initial incident guidance