Legal and compliance after an attack
GDPR reporting deadline, NIS2, insurance, liability, criminal complaint: general guidance for management. Not legal advice.
GDPR Reporting Obligation: 72 Hours After the Incident
After an attack on a web server, a duty to notify the supervisory authority may apply. This page explains in general terms when the 72 hours start and what belongs in a report.
Read more →02NIS2 and Web Server Security
NIS2 obliges many companies to carry out risk management and reporting. This page explains in general what that means for web servers and where to find reliable information.
Read more →03Cyber Insurance: What Counts in a Claim
In an attack, early notice to the insurer, preserved evidence and coordinated steps often decide the payout. This page explains the typical points in general terms.
Read more →04Liability of Management for IT Security Gaps
IT security is a management task. This page explains in general which duties of care apply and how managing directors can make decisions on vulnerabilities like PHP2Shell in a traceable way.
Read more →05Filing a Criminal Complaint: Central Contact Points for Cybercrime
Companies have central contact points for cybercrime at the state criminal police offices in Germany. This page explains how a report after an attack works and what to prepare.
Read more →06Crisis Communication After an Attack
After an attack, good communication decides trust. This page explains whom to inform in which order and how a factual notice is structured.
Read more →07What the BSI Recommends on PHP2Shell
The BSI has declared warning level 3 (orange) for PHP2Shell and recommends an immediate update or temporary shutdown. This page explains what that means in practice.
Read more →08Creating an IT Emergency Plan for Web Servers
A good emergency plan fits on a few pages and answers the most important questions in an emergency. Here is how to create an IT emergency plan for your web servers.
Read more →Every hour counts. Write to us now.
Briefly describe your system, PHP version and observation. We will get back to you, clarify the situation and work remotely until the incident is closed and documented.