When your tools go down, your crisis cell stays open.
During a cyberattack, email, documents, the directory, and sometimes the crisis procedures themselves become unreachable, at the very moment people need to coordinate. The Safe Room is a project Nestor is running with specialized partners: a crisis space set up before the incident, reachable from any browser. The project is supported by the Crossroads program, co-funded by the European Union (ERDF).
- The alertDetected or triggered by hand
- The Safe RoomOpen to each person, with their access
- ManagementNotification obligations and deadlines
- SecurityResponse and recovery procedures
- LegalNotification templates and contacts
- CommunicationsPrepared message templates
01The paradox
When you most need to coordinate, there is no tool left to do it.
The tools go down together
Email, file sharing, and the directory often rely on the same infrastructure: one attack can take them all down at once.
The procedures are on the affected servers
Business continuity plans, contact lists, notification templates: often stored where no one can reach them anymore.
The first hours count
The teams that come through best are the ones that know what to do, and where to meet, from the start.
You will have to account for it
Authorities, auditors, and insurers will ask what was decided, by whom, and when.
02Three uses
A space used before, during, and after the crisis.
A tool you only open on the day of an attack is of no use under pressure. So the project plans three overlapping uses.
- 01 / Day to day
A workspace
Video calls, messaging, and document sharing, used every day: on the day they matter, teams already know how to use them.
- 02 / During the crisis
A crisis room
The alert notifies everyone and opens the room. Each role finds its access and its documents there: continuity procedures, emergency contacts, notification templates. An assistant guides you through obligations and deadlines.
- 03 / After
A crisis log
Every action is time-stamped as the incident unfolds: the file for auditors, insurers, and authorities builds up without having to be reconstructed afterward.
03Nestor's part
The crisis document cabinet, and its record.
Nestor brings to the project what it already does for your document exchanges, adapted to a crisis.
- A preloaded cabinet
- Procedures, contacts, and templates ready before the incident, organized by role and by type of crisis.
- Role-based permissions
- Everyone acts according to their role, as in Nestor's secure spaces today.
- Up-to-date versions
- The latest version of each procedure, and the history of earlier ones.
- A time-stamped log
- An extension of Nestor's activity log: who did what, and when.
04The project's principles
Designed to work when everything else has stopped working.
A browser is enough
Nothing to install: reachable even when workstations and usual tools are compromised.
Hosted in Europe
The project plans European hosting and open-source components that can be audited.
Ready before the incident
Procedures and access are prepared ahead of time, then tested during crisis exercises.
Designed for your obligations
Business continuity, crisis management, and incident notification: requirements of NIS 2 and DORA.
05Who it is for
For organizations that cannot afford to stop.
Organizations subject to NIS 2
Business continuity and incident notification within 24 and 72 hours.Financial entities subject to DORA
Response and recovery plans, management of major incidents.Local authorities and healthcare facilities
Services to keep running, even when the information system is hit.Legal departments and small businesses
A simple framework, default templates, a record of every decision.
06Frequently asked questions
Frequently asked questions
When will the Safe Room be available?
The project is in development. Write to us to hear when it opens and about the first exercises.
Does it replace a business continuity plan?
No. It makes your plans accessible and usable during the crisis, and keeps a record of how they were carried out. The plan itself remains yours.
Is it a simulation tool?
No. It is used during a real incident, with your own procedures. Crisis exercises let you get familiar with it beforehand.
Does your crisis cell have a place to meet?
Tell us about your procedures and your obligations: we will keep you posted on the opening of the Safe Room.
- Fully sovereign European hosting
- No account to create for the people you work with