1. Preserve
Do not delete logs, messages, files or equipment that may help understand the incident.
Cyber incident?
If an incident is under way, limit irreversible actions, preserve available evidence and use the confirmed contact channel below.
Do not delete logs, messages, files or equipment that may help understand the incident.
Avoid mass restarts or disconnections without coordination. Record the time, affected systems and observed symptoms.
Email contact@bluesec.ma with the subject “Cyber incident — urgent”. Do not attach sensitive data to the first message.
Availability and response times depend on the contractual arrangement in place. This page does not represent a 24/7 service commitment.
Confirmed channel
Recommended subject: Cyber incident — urgent