The first 24 hours protocol.
A rumour, a fake press release, a doctored video targeting your organisation: most of the damage comes not from the attack but from the improvised response in the hours that follow. This protocol gives the hour-by-hour course of action. Document in French.
What the document contains
A designated decision-maker with a deputy, a written alert chain, thresholds and a second channel for sensitive requests.
No response yet. A four-question qualification sheet, evidence preservation, an incident log.
The four-condition grid: at least two met, otherwise no public response. And what you never do.
Targeted treatment in order: stakeholders, relays, platforms, internal, legal. Then the H24 situation review.
The full protocol on one page, with the contacts to fill in before the incident.