Skip to content
Cyber essentials

Cyber Incident Response Manager, Mark Cunningham-Dickie, offers advice for when the worst happens.

The scenario

It’s Friday afternoon, you’re looking forward to finishing up for the week, maybe you have something planned for that weekend, a trip somewhere, or more likely, a family Zoom quiz…

You’re just clearing things off your list and getting everything ready for the following week. 


an email comes in.

Maybe it has an attachment, maybe it’s a link – is it something that you can sort quickly so it’s another job off the list? 

“One less thing to deal with on Monday”, you think to yourself.

Maybe it even says ‘URGENT’ in the subject line. You click it and almost instantly, something is wrong. 

You don’t know what, but your heart and stomach feel like they’ve just sunk inside you. You’re now panicking and unsure what to do next.

The next steps

Fortunately, the Scottish Government and Scottish Business Resilience Centre (SBRC) have teamed up to provide SMEs and the third sector within Scotland, with a free and confidential Cyber Incident Response number that you can call in such a scenario.

The service provides free advice, guidance and triage for cyber incidents and is supported by a cadre of cyber incident response companies across Scotland.

About Incident Response

The service is run from 9am to 5pm, Monday to Friday, and can help with any cyber incidents including:

  • Malware
  • Ransomware
  • Business email compromise
  • Phishing
  • Data loss
  • Insider threat
  • Account compromise

We can even help verify cyber incidents, identify any appropriate reporting and put you in contact with companies in your area who are specialists in resolving and recovering cyber incidents.

The number to call is: 01786 437472.

When to call

The sooner you call after you detect, or suspect, a cyber incident the greater the chances of recovery and damage mitigation.

But remember, we’re here to support you at any and every stage of a cyber incident no matter how big or small.

What should I do now?

If you’re reading this because you have been hit by a cyber incident or think that you’re suffering a cyber incident then call 01786 437472 or email [email protected]

If you haven’t, it’s great practise to share this article with others in your organisation and make sure they have a note of the number.

Finally, if your organisation is interested in learning more about preparing for, or protecting yourself and your company from, cyber-attacks email [email protected]