A cyber attack on a local authority: communicating quickly and carefully
A ransomware attack brings municipal systems to a standstill and puts citizens’ data at risk. CrisisRadar helps local authorities to communicate clearly with citizens, regulators and partners immediately upon detection.
What happens
A ransomware attack brings all municipal systems to a standstill. The civil affairs desk is closed, the website is down and 80,000 residents are unable to apply for documents. At the same time, it turns out that personal data has been stolen.
Within an hour, citizens, businesses, the NCSC and the data protection authority must be informed about the data breach and the recovery. The GDPR sets strict requirements: a notification to the supervisory authority within 72 hours and, in the event of a high risk, a message to the residents concerned without undue delay. Delays lead to fines and a loss of trust.
From alert to clear communication
Impact in pictures
See immediately which systems and which data have been affected, and which services are offline.
AVG on time
Ensure that statutory deadlines are met and prepare the necessary notifications for the regulator and members of the public.
One clear line
Communicate simultaneously and consistently with members of the public, businesses, the NCSC and the press.
See it in practice
A brief walkthrough of a cyberattack with a data breach in CrisisRadar: from the situational picture and the facts to the response plans, business continuity and the communication to residents.
What Noor sees: a cyberattack through the eyes of a resident
Noor wants to make an appointment with her municipality, but she can't: there has been a cyberattack. On the status page she immediately sees what is going on and what she can do now. Meanwhile, the crisis team uses its own AI assistant and CrisisRadar to prepare the reporting-deadline timers, the facts and a first message. A human reviews and decides.
Dramatised scenario with a fictional municipality and resident. The screens of CrisisRadar and the status page are real. No spoken text, music only.
Read the text from the film
- A cyberattack at your municipality. What does a resident see?
- Noor wants to make an appointment. That isn't possible right now.
- Noor immediately sees what's going on and what she can do now.
- There will be news on Saturday at 12:00.
- Forty minutes earlier. At the municipality.
- You ask the AI you already use for help in CrisisRadar.
- The reporting-deadline timers are running: NCSC 24 hours, Dutch Data Protection Authority 72 hours.
- What do we know for sure? And what don't we know yet?
- The AI writes a draft of the first message.
- You review, adjust and decide.
- Only once you approve does it go online.
- Noor knows what's going on and when she'll hear more.
How this scenario looks in CrisisRadar
Real screens from a cyberattack with a data breach in CrisisRadar: from situational assessment and legal coordination to the communication to residents.
One situational picture for the entire team
Title, status, phase and the key message in a single overview. Management, the CISO, the data protection officer and communications work with the same information.
Recording and weighing the facts
Confirmed and uncertain facts with their source: which systems have been affected, which data may have been stolen and what is still uncertain.
Roles, permissions and external parties
Your own crisis team plus external guests such as a forensic investigation team, a lawyer and an external spokesperson, with secure, temporary access.
One message to all audiences
A key message, a message to residents and businesses and a report to the supervisory authority, ready to share.
Public status page
Residents follow which services are working and what they can do now on your own, recognisable page with a unique link.
Ready for the GDPR and cyber supervision
Municipalities operate under the BIO2 and the GDPR and fall under the Cybersecurity Act (NIS2). In the event of a data breach, strict deadlines apply. CrisisRadar helps you make the right report on time.
Data breach within 72 hours
You report a data breach within 72 hours to the Dutch Data Protection Authority; in the event of a high risk, you inform the residents concerned without delay. CrisisRadar keeps track of the clock.
Cybersecurity Act (NIS2)
You report a cyber incident to the NCSC and the sectoral CSIRT: early warning within 24 hours, notification within 72 hours, final report within 1 month.
BIO2 and the IBD
Work in accordance with the BIO2 and engage the Information Security Service (IBD); record measures and decisions.
Who collaborates in this scenario
CrisisRadar brings all the parties involved into line, with a single shared situational picture.
- Statutory notifications within the GDPR deadlines
- Citizens informed in a timely and clear manner
- Technical and legal details in line with each other
- Maintaining trust through transparency
Well prepared for this scenario?
In a short demo we show you how CrisisRadar helps, from preparation to the first minute of the crisis.