Even with training, it’s easy for someone to slip into autopilot. Clicking on a suspicious link, downloading an attachment without thinking, or responding to a convincing scam email. That’s why having a clear, immediate action plan is essential.

IF YOU THINK YOUR PC MIGHT HAVE BEEN COMPROMISED

1.Shut Down your Computer Immediately

If your machine doesn’t shut down normally, it may be that a malicious infection is preventing it from doing so. If that’s the case, perform a hard shutdown by holding down the power button until the machine shuts down.

2.Report the Incident Internally

Speed is of the essence. Don’t delay in reporting the incident to your manager or internal IT team.

3.Report the Incident to Mother

Unless your internal policies instruct otherwise, call us. Mother needs to speak with you directly to understand the incident in order to take appropriate action. Please do not use email, apps, or the Client Portal to report it. Phone us and explicitly declare your cyber threat concerns. Mother has an internal protocol to expedite potential cyber threats. 

IF YOU THINK YOUR MOBILE DEVICE MIGHT HAVE BEEN COMPROMISED

Unless jailbroken, mobile devices, especially iPhones, are generally more secure than PC’s. Nevertheless, your credentials may have been stolen and access to other services and your corporate network may be compromised. Take appropriate action.

1.Reboot the Device

Rebooting your phone or tablet interrupts running processes and flushes the memory.

2.Disable WiFi and Mobile Data on your Device

Once your device has rebooted, disabling WiFi and mobile data will prevent further Internet communications but you will still be able to make and receive calls.

3.Report the Incident Internally

Speed is of the essence. Don’t delay in reporting the incident to your manager or internal IT team.

4. Report the Incident to Mother

Unless your internal policies instruct otherwise, call us.  Mother needs to speak with you directly to understand the incident in order to take appropriate action. Please do not use email, apps, or the Client Portal to report it. Phone us and explicitly declare your cyber threat concerns. Mother has an internal protocol to expedite potential cyber threats,

RANSOMWARE ATTACK

A ransomware attack might not always present as a pop-up message requesting funds or payment. Perhaps you’re unable to login or access your device. Files may have disappeared or moved without explanation. Files may request a password or code to open them. Filenames may have been replaced with random characters or strange file extensions (e.g. .locked .xyz .encrypted).

1.Shut Down your Computer Immediately

If your machine doesn’t shut down normally, it may be that a malicious infection is preventing it from doing so. If that’s the case, perform a hard shutdown by holding down the power button until the machine shuts down.

2.Report the Incident Internally

Speed is of the essence. Don’t delay in reporting the incident to your manager or internal IT team. Your internal IT team should:

• Pull the plug and disconnect your network from the internet
• Shutdown all systems

3.Report the Incident to Mother

Unless your internal policies instruct otherwise, call us. Mother needs to speak with you directly to understand the incident in order to take appropriate action. Please do not use email, apps, or the Client Portal to report it. Phone us and explicitly declare your cyber threat concerns. Mother has an internal protocol to expedite potential cyber threats.