The First 30 Days · crisis profile
04 / 06
The Diplomat
Your people tell you everything: who clicked, who got a strange email, who fumbled — around you, reporting works the way the textbooks say it should, because nobody is afraid of you. That's a fortune many directors will never have. Except trust, on its own, doesn't make backups and doesn't verify IBANs: the team brings you the truth in time, and you don't yet have anything to put it on. You built the hard part and skipped the boring part — most people do it the other way round, so you're at least half original.
3 recommendations
- Turn goodwill into habit: the written rule "any new IBAN = a verification phone call" takes a day to introduce and covers the most expensive possible mistake.
- Daily backup, tested monthly — put it in the calendar like a meeting with yourself, because that's exactly what it is.
- Give your team training worthy of their trust: people who report well deserve to recognise well too — a short course gives them the eye they're missing.
What's your profile?
12 decisions, 3 minutes — and you'll know how you lead when nobody gives you time to think.
Play it yourself — 3 minutesThen this story isn't just a game for you.
Companies in regulated sectors have legal security obligations — NIS2, in Romania GEO 155/2024 — with reporting deadlines, mandatory measures and real fines. CERTO walks you through them step by step, in plain language, no jargon.
See CERTO — NIS2 compliance without the bureaucracyThe good news: everything you practised here can be trained for real.
The instinct from that first email, the reflex to pick up the phone and verify, a culture where people report — that is exactly what our training programmes build, with realistic simulations and no blame hunts.
A work of fiction — the characters and companies are invented. The attack mechanisms and the lessons are real.