Help after a cyber attack

How to get back up and running safely
Book a free, no-obligation consultation now.

Suffered a cyber-attack? Every second counts now.

A cyber-attack can paralyse business operations in a matter of minutes. Ransomware, phishing, data leaks or system failures – a cyber-attack can cause enormous damage. We help you to minimise this. Our cyber security team reacts in real time, analyses attacks forensically and restores your operations as quickly as possible.

Through proactive crisis management and active threat detection, we not only protect your SME in an emergency, but also strengthen your cyber resilience in the long term.

In order to avoid an emergency in the first place, prevention is the key. Our IT experts will be happy to advise you.

Cyber-attacks: BDO is at your side

Crisis management in real time

Crisis management in real time

In an emergency, every second counts. Our incident response team will be at your side to analyse the attack and initiate targeted countermeasures - transparently and on an equal footing.

Minimising damage

Minimising damage

From root cause analysis and damage assessment through to rapid system recovery, we make sure that your company is up and running again as quickly and safely as possible.

Efficiency through global expertise

Efficiency through global expertise

You can count on us for advice across a range of disciplines. Thanks to our global network, we can help you with any question regarding your cyber-attack, no matter how specific.

Discover our services for increasing cyber resilience

Continuity management

Continuity management

Could your company survive a cyber crisis unscathed? Our continuity management service helps you to get through any crisis periods without interruption. Through careful risk analysis and suitable defence strategies, we ensure that your business remains operational in the event of a cyber-attack and that your competitiveness is safeguarded.

Contingency plan

Contingency plan

Are your IT systems no longer accessible after an attack? Our experts will support you in efficiently defining organisational structures, communication channels and the crisis team so that your company can respond to an emergency quickly and in a targeted manner.

Incident response/ CSIRT

Incident response/ CSIRT

In the event of a cyber-attack, every second counts. A rapid, targeted response can minimise the damage considerably. At your side with our expertise, we can quickly take the right steps and effectively protect your SME. Rely on our expert knowledge to deal with the attack and restore your company’s security as quickly as possible.

Digital forensics with BDO

Digital forensics with BDO - discreet and legally compliant

In the event of a cyber-attack or suspected digital crime, rapid and detailed investigation is crucial. Our team of forensics experts will help you to securely analyse data and systems, preserve evidence and determine the cause of an incident. With our experience in digital forensics, we support you in conducting legally compliant investigations – discreetly, efficiently and reliably.

Crisis management

Crisis management

Clear decisions are required in a crisis. With our many years of experience, we can help you respond quickly and effectively. Our experts help your managers not only to overcome the crisis, but also to emerge from it stronger than before. Rely on our proven expertise to make your company more resilient in the long term.

Assessing financial losses in the event of business interruptions

Assessing financial losses in the event of business interruptions

A cyber-attack can have serious financial consequences. In the event of a business interruption due to a cyber-attack or other disruption, precise documentation of the financial impact is essential. We help you to document the effects precisely, compile all relevant information for your insurers and prepare a complete damage calculation. Our independent expertise ensures that the claims' handling process is conducted efficiently and correctly, so that you receive the support you deserve quickly. Rely on our experience to document the financial consequences of an incident transparently and accurately.

Do you need help with cyber security?

We support SMEs with their cyber security needs

With a carefully planned strategy and targeted measures, IT security can become your strength. Together with your team, we uncover vulnerabilities, optimise defence mechanisms and reduce risks. Find out about our comprehensive services – from security tests and emergency assistance after a cyber-attack through to customised cyber strategies.

  • - Cyber risk analysis and protective measures
  • - Training and raising awareness of cyber threats
  • - Incident response and damage limitation to minimise financial losses
  • - Review of IT security guidelines
BDO locations

Cyber security: we are there when you need us

With over 40 locations in Switzerland and a global network, BDO is always close by when it comes to your security. Whether on site in one of our offices or digitally – we rely on trust, personal interaction and customised solutions. Come and see us!
DISCOVER LOCATIONS

Frequently asked questions about incident response

How do I react to a cyber-attack?

Speed is key: your company should have a contingency plan ready for cyber-attacks. This includes immediately isolating the systems affected, reporting to security services and conducting forensic analysis to investigate the incident. We also offer help you restore data and secure your IT infrastructure against future attacks. Our cyber emergency team is there for you, to minimise damage and restart business operations as quickly as possible.

What are the first steps after a cyber-attack?   

  • Keep calm and act methodically.
  • Isolate systems to prevent further spread.   
  • Consult a specialist. 
  • Activate the contingency plan and notify employees. 

What exactly happens during incident response?

After a cyber-attack, our incident response team starts by analysing the cause and extent of the incident. Suitable measures are then introduced to limit the damage and quickly get the company back up and running. These include:

  • Identifying and containing the threat
  • Backing up and analysing relevant data
  • Recovery of affected systems
  • Developing measures to prevent future attacks

Qur goal at BDO is not only to help you in acute cases, but also to strengthen your IT security in the long term.

Why is a contingency plan so important?

A contingency plan ensures that your company can react quickly and efficiently in the event of an emergency. Without clearly defined processes, valuable time is lost, which can significantly increase the damage caused by a cyber-attack. A well-designed contingency plan includes:

  • A detailed overview of potential threats
  • Defined roles and responsibilities in the event of a crisis
  • Clear communication channels and escalation levels
  • Regular training and testing to ensure operational readiness

We support you in defining a contingency plan.

How long does it take for my SME to get back to work after a cyber-attack?

There is no one-size-fits-all answer to this question – the recovery time depends on various factors, including the extent of the attack, the systems affected and the security measures in place. Companies with a solid contingency plan can often be up and running again within a few hours or days. However, in the case of serious attacks – such as ransomware – it can take weeks for all systems to be fully restored.