Which number do you call first on cyber insurance?

Cyber insurance only works if you call the 24x7 emergency number before you do anything else. The policy often covers IR hours, forensics, lawyers and comms, but only if the insurer assigns the party. Bringing in your own party before notification is a common mistake.

Try this first

1. 1Find your insurer's 24x7 emergency number today and put it on a physical card in a safe or on the office board. Not only in the policy PDF on a network share that might be encrypted.
2. 2Put the number on the exec's and IT lead's phone as a plain note. Not a photo of the policy, not an email, a note that opens offline.
3. 3On an incident: call the emergency number before doing anything else, even before turning anything off. The insurer assigns an IR partner. Working ahead on your own can mean hours are not reimbursed.
4. 4If you have no retainer through the insurer, ask once a year whether the IR partner has changed. Insurers rotate providers, and you do not want to find out during incident chaos.
5. 5Test-call the number briefly once a quarter to confirm the policy is active and the number is right. An insurer that does not pick up on a Friday night is information you want today, not during a ransomware attack.

None of the above fits?

Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.