First action
Assess active harm, alert the responsible team and preserve minimal useful evidence. A technical compromise requires technical response alongside public-source analysis.
Topic pathway
Public exposure and incident response
Inventory public assets, document exposed data, recover accounts and organise proportionate remediation.
What is exposed, who owns it and what must happen first?
Useful output
An asset inventory, assigned remediation list, incident timeline and checks showing what has been contained.
Interpretation limit
Public visibility is not proof of vulnerability. Stay within authorised observation; do not test credentials, expand downloads or scan third-party systems without permission.
Select the guide matching the question
Audit digital exposureCyber guide · 10 minMap public digital infrastructureInfrastructure guide · 14 minDocument a public data exposureIncident guide · 12 minAudit an executive’s public exposureProtection guide · 13 minRecover a compromised accountResponse guide · sessions and accessRespond to online impersonationResponse guide · 10 min
Keep the decision traceable
Record the fact being checked, the material reviewed, what remains unknown, the person responsible and the next review trigger. A result is useful when another reader can understand why an action was chosen and what would change it.