## Cambium Data Blog

Cambium Data has been serving the Omaha area since 2009, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

 [ Categories ](https://cambiumdata.directivesites.com/blog/categories "Categories")

 [ Tags ](https://cambiumdata.directivesites.com/blog/tags "Tags")

 [ Categories:  All Categories ](https://cambiumdata.directivesites.com/javascript:void(0); "Categories")

 Search...Suggested keywords

 [  x ](https://cambiumdata.directivesites.com/javascript:void(0);)

 <a class="eb-image-viewport"></a>

#  The First 60 Minutes: How to React to a Cyberattack

  [Cambium Data Blog](https://cambiumdata.directivesites.com/blog/categories/blog)   [Security](https://cambiumdata.directivesites.com/blog/categories/security)

  [Tony Underwood](https://cambiumdata.directivesites.com/blog/blogger/tony-underwood)

  Wednesday, 20 August 2025

   [ 0 Comments ](https://cambiumdata.directivesites.com/blog/the-first-60-minutes-how-to-react-to-a-cyberattack#comments)

 [ ![The First 60 Minutes: How to React to a Cyberattack](//cambiumdata.directivesites.com/images/easyblog_shared/August_2025/08-20-25/b2ap3_large_1sthour_429113635_400.jpg) ](//cambiumdata.directivesites.com/images/easyblog_shared/August_2025/08-20-25/1sthour_429113635_400.jpg "The First 60 Minutes: How to React to a Cyberattack")

Don’t underestimate the danger of a cyberattack. Even small ones that are seemingly insignificant compared to major threats, like ransomware, have the potential to cause serious disruption to your operations. Regardless of the severity of the threat, you want to have an incident response plan that is tested, documented, and ready to deploy at a moment’s notice. Let’s go over what happens in the hour following a cyberattack and why acting quickly is so important.

## What To Do During the First 60 Minutes of a Cyberattack

Before we get too into the weeds, know that you shouldn’t try to fix *everything* in the first 60 minutes. This is damage control, plain and simple, and you should be working to ensure your recovery measures are in full swing.

### Here’s What To Do:

**Contain the Threat** Things will only get worse if you don’t keep the threat from infiltrating other parts of your infrastructure. Isolate it by shutting down a server or disconnecting a workstation from the network. Once you’ve stopped the spread, you can take further action.

**Communicate with Contacts** You’ll want a communication plan in place for these types of events, and it should outline who is responsible for various tasks associated with outreach. Who is going to tell your supervisor what’s going on, and who is going to reach out to the insurance provider and legal representation? Most important of all is who will reach out to IT to determine next steps. Make sure everyone is on board with this plan and knows it exists.

**Control Communication** For situations like these, you’ll want a single point of contact that is handling public communication regarding the incident. Beyond that person, your staff should not speak publicly about the incident. This helps to control misinformation and keeps your business from being held liable.

**Create a Record** Make sure you’re documenting everything that occurs from the moment the incident is discovered. This record should include data that was breached, as well as the steps you’re taking to resolve the incident. Make sure you’re waiting for IT’s permission to delete any data from the device that’s been infected, as you want to preserve evidence if you can.

## Really, This is the Bare Minimum for a Response Plan

Probably less than the bare minimum, honestly—you cannot neglect this critical process, as it could mean much more than just an infected computer. It could mean risking your business as a whole. We can help make sure it doesn’t come to that.

If you’re ready to take security seriously, Cambium Data can help. To learn more, call us at (402) 514-3200 today.

 [  ](https://cambiumdata.directivesites.com/javascript:void(0);) [  ](https://cambiumdata.directivesites.com/javascript:void(0);) [  ](https://cambiumdata.directivesites.com/javascript:void(0);)

Tags:

  [Security](https://cambiumdata.directivesites.com/blog/tags/security)   [Best Practices](https://cambiumdata.directivesites.com/blog/tags/best-practices)   [Ransomware](https://cambiumdata.directivesites.com/blog/tags/ransomware)

 [  Hackers Face Serious Consequences, but Do It Anywa... ](https://cambiumdata.directivesites.com/blog/hackers-face-serious-consequences-but-do-it-anyway)

 [  A Business Acquisition is Exciting… If It’s Handle... ](https://cambiumdata.directivesites.com/blog/a-business-acquisition-is-exciting-if-it-s-handled-properly)

 About the author

 [ ![Tony Underwood](https://cambiumdata.directivesites.com/images/easyblog_avatar/1000002_404_tony-blog.jpg) ](https://cambiumdata.directivesites.com/blog/blogger/tony-underwood)

 [Tony Underwood](https://cambiumdata.directivesites.com/blog/blogger/tony-underwood)

  [  ](https://cambiumdata.directivesites.com/blog/blogger/tony-underwood)

Tony Underwood, Founder and President of Cambium Data Inc. has proven himself as one of the top internetworking experts in the industry. Mr. Underwood began his IT career in 1991 in the US Navy working on critical military computer systems. He grew his computer and networking knowledge through a number of different IT jobs from desktop support all the way up to leading the Network Engineering organization of a multi-billion dollar international company. Mr Underwood was recognized as Cisco Certified Internetwork Expert [\#7112](https://connect.directive.com/v4_6_release/services/system_io/Service/fv_sr100_request.rails?service_recid=7112&companyName=Dti) in March of 2001 and in 2022 he achieved the lifetime status of Cisco CCIE Emeritus

Author's recent posts

  [More posts from author](https://cambiumdata.directivesites.com/blog/blogger/tony-underwood)

 [ Friday, 04 September 2026  How Modern IT Management Mitigates Zero-Day Threats ](https://cambiumdata.directivesites.com/blog/how-modern-it-management-mitigates-zero-day-threats)

 [ Thursday, 03 September 2026  Cambium Data launches new website! ](https://cambiumdata.directivesites.com/news-a-events/launches-new-website)

 [ Wednesday, 02 September 2026  How to Avoid the 4 Common Backup Failures ](https://cambiumdata.directivesites.com/blog/how-to-avoid-the-4-common-backup-failures)

 <a class="eb-anchor-link" data-allow-comment="1" id="comments" name="comments"> </a> Comments

  No comments made yet. Be the first to submit a comment

   **![Guest](https://cambiumdata.directivesites.com/media/com_easyblog/images/avatars/author.png)**   Already Registered? [Login Here](https://cambiumdata.directivesites.com/home/login-logout?return=aHR0cHM6Ly9jYW1iaXVtZGF0YS5kaXJlY3RpdmVzaXRlcy5jb20vYmxvZy90aGUtZmlyc3QtNjAtbWludXRlcy1ob3ctdG8tcmVhY3QtdG8tYS1jeWJlcmF0dGFjaw==)

 Friday, 04 September 2026

  Subscribe to the blog (Please fill in your email address to subscribe to updates from this post.)

 **Captcha Image**
