Home / Cybersecurity incident first steps Version 0.1 ยท reviewed August 23, 2026
Security Action Index The Security Action Index routes a symptom to safe first actions, evidence cautions, and escalation triggers. Start with the situation you can observe. The index is a guide for choosing a sensible first route, not automated diagnosis.
All situations Urgent first moves Prepare a team
First move Pause, record the basics, and use a trusted route.
Preserve Time, messages, notices, settings, and relevant account details.
Escalate Provider, bank, employer, or specialist if recovery is blocked or impact grows.
First move Pause, record the basics, and use a trusted route.
Preserve Time, messages, notices, settings, and relevant account details.
Escalate Provider, bank, employer, or specialist if recovery is blocked or impact grows.
First move Pause, record the basics, and use a trusted route.
Preserve Time, messages, notices, settings, and relevant account details.
Escalate Provider, bank, employer, or specialist if recovery is blocked or impact grows.
First move Pause, record the basics, and use a trusted route.
Preserve Time, messages, notices, settings, and relevant account details.
Escalate Provider, bank, employer, or specialist if recovery is blocked or impact grows.
First move Pause, record the basics, and use a trusted route.
Preserve Time, messages, notices, settings, and relevant account details.
Escalate Provider, bank, employer, or specialist if recovery is blocked or impact grows.
First move Pause, record the basics, and use a trusted route.
Preserve Time, messages, notices, settings, and relevant account details.
Escalate Provider, bank, employer, or specialist if recovery is blocked or impact grows.
First move Pause, record the basics, and use a trusted route.
Preserve Time, messages, notices, settings, and relevant account details.
Escalate Provider, bank, employer, or specialist if recovery is blocked or impact grows.
First move Pause, record the basics, and use a trusted route.
Preserve Time, messages, notices, settings, and relevant account details.
Escalate Provider, bank, employer, or specialist if recovery is blocked or impact grows. Each route is maintained with a source trace and review date. See how the index is updated .
