All Collections
Continuous Risk Assessment, Risk Resources
You discover a cyber incident! What now?
You discover a cyber incident! What now?
Follow these steps immediately when you think you might have experienced a cyber incident.
Isabelle Dumont avatar
Written by Isabelle Dumont
Updated over a week ago
  1. Report the incident immediately to Cowbell:

    (833) 633 – 8666 (ext. 702)

  2. Develop a summary or timeline of events leading to the discovery of the cyber event.

  3. Track all costs, if any, that you have incurred to date associated with the cyber event.

  4. Estimate the number of devices and/or endpoints on your network.

The above will give you access to in-house cyber claims experts who will immediately work with you to assemble the best incident response team to help you recover and speed up your return to normal operations.

Provide Cowbell contact information for necessary decision-makers and interested parties - business owners, executive officers, internal IT professionals, security officers, and/or any third-party IT or security providers.

Specifically, you should provide:

  • The date and time the potential cyber event was discovered

  • A basic summary/timeline of the facts associated with the event

  • Any remediation efforts undertaken

  • Any vendors and/or attorneys retained

  • Any financial loss experienced to date.

If you have experienced a wire fraud event:

  • Collect all communications that you suspect may have led to the event.

  • Gather banking information or transaction confirmations documenting the transfer.

  • Provide contracts related to the potential wire fraud event.

If you have experienced an email breach event:

  • Develop an outline of customers' information and data that might have been sent, stored, attached, etc. to your email system, including invoices, contracts, and/or personal information of employees, customers, or partners.

If you have experienced a ransomware event:

  • Do not engage the bad actor. Cowbell’s team will assist with any ransom negotiations.

  • Do not attempt to restore from backups. Cowbell will provide experts to ensure that your system is safe and secure prior to any restoration.

  • Determine if you have any legacy and/or specialty equipment or software that may have been affected by the event.

  • Develop an outline of sensitive data or information that your system may contain that may have been affected by the event.

STAY IN CLOSE CONTACT WITH COWBELL AND THE CLAIMS-HANDLING TEAM THROUGHOUT THE PROCESS (IMMEDIATELY RESPOND TO EMAILS AND CALL THEM BACK!).

Did this answer your question?