TOOLBOX · DOWNLOAD
IT emergencycard for thewall.
In an IT emergency, the first minutes count. Anyone who notices that something is wrong must know whom to call, what to say and what to leave alone. This emergency card follows the poster “Behavior in IT Emergencies” from the German Federal Office for Information Security (BSI) and adapts it to Austria. Page 3 is the card to fill in and post. The other pages explain how to fill it in and roll it out, which bodies you can reach in Austria and which questions IT should ask after an attack.
Free PDF · Cheat sheet
IT Emergency Card: A Fill-In Poster for When Things Go Wrong
- Topic
- Backup & Emergency
- Format
- PDF, A4
- Length
- 7 pages
- Size
- 94 KB
- Updated
- Oct 25, 2026
- Sources
- 10
- Usage
- Redistribution in unchanged form permitted
WHO IT IS FOR
Who This
Is for.
One page to post with emergency numbers, reporting questions and rules of conduct, plus reporting bodies in Austria and the first questions for IT.
- All employees, for whom the card hangs at workstations and in hallways
- IT management and emergency managers who fill in and roll out the card
- Management of small and medium-sized businesses without their own IT department
- IT service providers who prepare emergency cards for their customers
5 SECTIONS
What Is
Inside.
- 01
How to use this card
The next page is the poster. Fill it in, print it and post it where employees will look in an emergency.
- 02
What to do in an IT emergency
Stay calm and report immediately. Better to call once too often than once too few.
- 03
How to fill in and roll out the card
For emergency managers and IT: enter the numbers, make one decision, post, train, review.
- 04
External bodies in Austria
For emergency managers: whom to involve and when. Details as stated by the bodies themselves, as of October 25, 2026.
- 05
For IT: twelve questions after a cyberattack
Based on “TOP 12 Measures in Case of Cyberattacks” by the BSI, the German Federal Criminal Police Office and partners, as a prompt, not a fixed sequence.
EXCERPT
What to do in an IT emergency
| Who | Phone | Available |
|---|---|---|
| IT emergency number | __________ | __________ |
| Deputy | __________ | __________ |
| IT service provider | __________ | __________ |
| Management | __________ | __________ |
- Who is reporting?
- Name, department, callback number.
- Which device?
- Which computer, program or service is affected?
- What did you do?
- How did you last work with it, for example by opening an attachment?
- What did you see?
- Messages, locked files, unusual behavior.
- When?
- The time you noticed it.
- Where?
- Building, room, workstation.
- Stop working on the affected device
- Write down what you observed, photograph the screen with your work phone
- Take action only on instruction from the IT emergency number
- If you suspect malware: [unplug the network cable and turn off Wi-Fi] or [only on instruction]
Do not repair anything yourself, do not delete anything, do not make any payments. If people are in danger: police emergency number 133 or European emergency number 112.
SOURCES
Supported
by Sources.
- BSI: IT emergency card “Behavior in IT Emergencies” (DIN A4) (opens in a new tab)Reporting questions and rules of conduct
- BSI: IT emergency card, usage notes and terms of use (opens in a new tab)Messages, posting locations, training, languages, terms of use
- BSI and partners: TOP 12 Measures in Case of Cyberattacks, as of September 2019 (opens in a new tab)twelve questions, preliminary remarks
- Federal Criminal Police Office: Ransomware, information for businesses in Austria (v20260806) (opens in a new tab)“And if it has happened …”
- Federal Criminal Police Office: Cybercrime, reporting office against Cybercrime (opens in a new tab)last updated August 27, 2026
- Police: Emergency numbers (opens in a new tab)133, 112, service number 059-133
- CERT.at: Contact (opens in a new tab)Reporting security incidents, availability
- WKO: Cyber Security Hotline of the Austrian Economic Chambers (opens in a new tab)Phone number, availability, for members
- Regulation (EU) 2016/679 (GDPR), Art. 33 (opens in a new tab)Notification to the supervisory authority
- NISG 2026, BGBl. I No. 94/2025, version in force in the RIS (opens in a new tab)§ 34 paras. 1 and 2, version of October 25, 2026
This emergency card is a TOMORIS recommendation based on the sources listed and must be adapted to your business. Third-party contact details reflect the status as of October 25, 2026, as stated by the respective bodies. It does not replace an emergency manual or legal advice on reporting obligations.
TOOLBOX
Explore
Further.
- Kostenlos
IT emergency card (German)
Print a poster with contacts
Check Now - Kostenlos
NIS2 reporting deadline calculator (German)
Deadlines from the time of awareness
Check Now IT emergency manual
Template for the crisis team, contact list, classification, immediate measures and recovery based on BSI Standard 200-4.
Learn MoreRansomware: first aid
Guide for the first hours after a ransomware attack, with immediate measures and reporting obligations.
Learn More
BACKUP & EMERGENCY
More on
This Topic.
- PDF
Backup Checklist 3-2-1-1-0
Three copies, two media, one off-site, one offline, zero errors in the recovery test: a data backup checklist, backed by BSI and CISA.
View - PDF
IT Emergency Manual
Crisis team, contact list, classification as disruption, emergency or crisis, immediate measures and recovery with RTO and RPO: a fillable outline based on BSI Standard 200-4.
View - PDF
Ransomware: First Aid
Isolate without destroying traces, secure evidence, block access, report correctly: what matters in the first hours and what you should avoid, backed by BSI, CISA, and the Austrian Federal Criminal Police Office.
View
YOUR NEXT STEP
From Paper
to Practice.
We review with you what is already implemented in your environment and put the rest into practice: as a project with EXPERTS or as ongoing operations with GRID.