Cybersecurity guide for your company
Cyber risk, translated into business decisions. Ten questions to know what cannot stop in your company, who decides in the first 24 hours, how much an incident really costs, and what the insurer will ask before covering you. With a final checklist to review your company.
Before the next incident
Could your team answer these?
- Which part of the business cannot stop?
- Who decides when a crisis begins?
- How much would a shutdown cost us?
- Can we resume operations without improvising?
Inside
Ten questions, four stages
Before the attack
Knowing your real exposure
- 1Which part of your business cannot afford to stop?
- 2Do you really know where an attacker could get in today?
- 3Where does the personal end and the corporate risk begin?
- 4Would you spot a fraud if the message, the voice or the image looked real?
- 5Are you protected if one of your suppliers is not?
- 6Can management delegate cybersecurity and AI to IT?
- What an insurer requires today before covering your risk
AI and governance
More autonomy, more control
- AI accelerates existing risks and creates a new one
- Six questions to govern an AI agent
During the attack
Deciding with sound judgement and measuring the impact
- 7Who decides during the first 24 hours?
- 8How much could a cyber incident really cost you?
- Who decides what: fill in this table before it happens
After the attack
Transferring the risk and getting back to business
- 9Is your cyber risk well insured?
- 10Could you recover your business without improvising?
60 %
of the cases ENISA analyses began with phishing. The way in is still a person.
Source: ENISA, Threat Landscape 2025The final checklist
Ten actions to review in your company
- Identify which part of your business cannot stop.
- Analyse your main exposure routes.
- Define where personal and professional use mix.