The First 30 Days · crisis profile
03 / 06
The Firefighter
You have an enviable nose: you smell the rotten email, you pull the cable out of the wall in time, you make good calls with a phone ringing in each hand. Your company survives its crises because you exist — and that is exactly the problem. When you're on holiday, in a meeting, or simply tired, the company is left without its defence system, meaning without you. Heroes are wonderful in films; in companies, they're a single point of failure with charisma.
3 recommendations
- Write down, on one page, what you do by instinct — the new-IBAN rule, the isolation steps, who you call — so it exists even when you don't.
- Get your backups and two-step authentication in order within the next two weeks: instinct doesn't decrypt files.
- Train your understudy: pick a person, hand them the next false alarm, and sit on your hands — hard, but otherwise you're the on-call firefighter for life.
What's your profile?
12 decisions, 3 minutes — and you'll know how you lead when nobody gives you time to think.
Play it yourself — 3 minutesThen this story isn't just a game for you.
Companies in regulated sectors have legal security obligations — NIS2, in Romania GEO 155/2024 — with reporting deadlines, mandatory measures and real fines. CERTO walks you through them step by step, in plain language, no jargon.
See CERTO — NIS2 compliance without the bureaucracyThe good news: everything you practised here can be trained for real.
The instinct from that first email, the reflex to pick up the phone and verify, a culture where people report — that is exactly what our training programmes build, with realistic simulations and no blame hunts.
A work of fiction — the characters and companies are invented. The attack mechanisms and the lessons are real.