Tiit Lepik’s mailing list

At work I have been dealing with resolving cyber incidents. Since we all come across them, I am sharing my conclusions.

I have put together a checklist that could help you know what to do if you suspect that something is wrong in the cyber world around you.

1. Avoid trying to assess your suspicions and look for solutions yourself. Neither you nor I can assess the real situation adequately.
2. If there is the slightest doubt that an e-mail, phone call or post is suspicious, contact the alleged sender directly before reacting. Ideally call a number from your own contacts or look for the contact on a public website.
3. To get instructions, call (putting it into words by e-mail is too complicated) CERT on 6630299. They will tell you how to proceed. They are an institution set up by the state specifically for this purpose. Their everyday work is dealing with nothing else. Their instructions are the only ones in Estonia that take into account the situation of the last few hours. https://www.ria.ee/kuberturvalisus/kuberintsidentide-kasitlemine-cert-ee/kuberintsidendist-teavitamine
4. Once you have followed the quick instructions, you have to file a report with the police online. Keep in mind that the police’s opinions and instructions on how to resolve the matter may not be correct or effective. Follow CERT’s positions. https://www.politsei.ee/et/avaldus-politseile

If there is time, you can also send the questions in writing once you have put them into words. I recommend following these rules both as a private person and at work as soon as any suspicion arises. If you feel that this reminder could help someone, feel free to share it.