Regain control of the incident before the situation slips beyond the organisation

We support companies with a fast, structured and defensible response to procedural breaches, whistleblower reports, HR incidents, GDPR matters, cyber incidents, compliance issues and management-risk situations.

Book a quick incident consultation

An incident is rarely “only” one department’s problem. A whistleblower report may involve HR, compliance and managerial responsibility. A data leak may trigger GDPR, cyber, internal communications and reputational risk. An internal conflict can quickly become a dispute, an inspection or an allegation of failure to respond.

The greatest risk is not the event itself. The greatest risk is a chaotic, late or poorly documented response.

“After an incident, a company does not need another list of abstract risks. It needs answers: what happens now, who decides, what we secure, and how we run the matter so it can be defended later.”

In such situations, decisions are taken under time pressure, often with incomplete information. At the same time, each of them may matter in an inspection, audit, employment dispute, counterparty claim or the liability of persons in management.

That is why we help move from uncertainty to controlled action: we qualify the incident, clarify roles, secure material, support communications and prepare recommendations for next steps.

Mateusz Sawaryn

Managing Partner Counsel

Most common problems / challenges

The most common problems we solve

It is unclear what type of incident the company is dealing with After an event, the organisation often does not know whether to respond as to an HR, GDPR, cyber, compliance, whistleblower or management-board liability issue. Any wrong qualification can delay the right actions.

View solution

As a first step, we help qualify the event, identify risk areas and indicate which actions are urgent and which can wait.

The company more quickly knows the next steps, whom to involve and how not to diffuse responsibility.

Delay, inconsistent decisions, omission of formal duties or escalation of the matter outside the organisation.

The management board must decide without a full picture of the situation In an incident, all the facts are rarely available at once. Even so, the management board, HR, compliance or IT must quickly decide how to handle documents, communications, the people involved and the further process.

View solution

We prepare a decision map: what is known, what is missing, what the courses of action are and what risks attach to each.

Decisions are taken on the basis of facts, priorities and recommendations, not under the pressure of emotion or chaos.

An allegation of lack of oversight, a disproportionate response, flawed communications or decisions the company cannot later justify.

Evidence, documents and findings are scattered In the first hours after an incident, it is easy to lose control of the material: correspondence, notes, access rights, logs, decisions, reports and versions of events.

View solution

We help determine what information to secure, how to document decisions and how to run the fact-finding trail so as not to weaken the company’s position.

The organisation has ordered response documentation and a stronger position in a dispute, inspection or audit.

Loss of material, an incomplete decision history, difficulty showing that the company acted reasonably and proportionately.

The incident starts to spread across further areas of the company A single matter can quickly cover HR, GDPR, cybersecurity, compliance, communications, counterparty relations and the accountability of decision-makers.

View solution

We coordinate the response at the intersection of multiple areas and help combine legal, organisational, documentation and communication actions into one plan.

The company acts consistently, without duplicating work and without overlooking critical risks.

Diffused responsibility, conflicting messages, loss of control of the narrative and greater reputational risk.

Procedures exist, but it is unclear how to apply them in practice Many organisations have policies, regulations and procedures. The problem begins when they must be activated under time pressure: who decides, which deadlines apply, what to document and when to involve the management board.

View solution

We help translate procedures into concrete actions: roles, the order of steps, documents, communications and recommendations for decision-makers.

The organisation gains a practical process, not merely a formal reference to the regulations.

Procedures remain “on paper", and the company acts intuitively - which may weaken its position in an inspection or dispute.

The company wants to close the matter, not only put out the fire An incident may signal a deeper problem: a gap in procedure, lack of oversight, weak communications, unclear accountability or a recurring risk.

View solution

Beyond handling the current matter, we prepare remedial recommendations: procedural, organisational, communication and management.

The incident is converted into greater organisational resilience and a better response model for the future.

A return of similar problems, further escalations and the impression that the company reacts only once the situation is already a crisis.

Our solution

From chaos to a controlled process

We go beyond identifying legal risks. We help the company organise the response: set priorities, secure material, support management-board decisions, order communications and close the matter in a defensible way.

From chaos to a controlled process

Initial incident qualification

analysis of basic information about the event,
identification of risk areas: HR, GDPR, cyber, compliance, whistleblowers, management-board liability,
indication of urgent actions and actions to avoid,
identification of the people who should be involved.

Incident map
List of action priorities.

Legal and organisational response plan

setting the order of steps,
defining roles and responsibilities,
establishing the decision path,
planning documentation and communications,
fitting the process to the organisation’s realities.

An action plan with a clear allocation of responsibilities.

Ordering fact-finding actions

determining what needs to be checked,
identifying documents and information to gather,
preparing a safe way to conduct interviews and findings,
limiting chaotic, excessive or premature actions.

fact-finding action scenario
list of materials to secure.

Securing documents, information and the decision path

ordering correspondence, notes, decisions and materials,
support in recording the facts,
documenting the grounds for actions taken,
preparing the matter for a possible audit, inspection or dispute.

ordered documentation of the response and decisions.

Coordinating risks at the intersection of multiple areas

combining legal, HR, GDPR, cyber, compliance and communication aspects,
identifying interdependencies between the actions of different teams,
limiting the risk of conflicting decisions,
support for communications between the management board, HR, compliance, IT and managers.

a consistent course of action across multiple risk areas

Recommendations for the management board and decision-makers

analysis of findings,
assessment of legal and business risk,
recommendations of courses of action,
support in preparing messages,
documenting final decisions.

management recommendation: which steps, when, who should decide and how to justify it.

Closing the matter and remedial actions

summary of the matter,
identification of gaps in procedures or practices,
recommendations for organisational changes,
updating procedures, plans or operating rules,
preparing the organisation for similar situations in the future.

closing package for the matter
recommendations,
remedial plan
final documentation

Who this service is for

For organisations that must act quickly but cannot afford chaos

The service is for companies that need to order their incident response, support decision-makers and limit the risk of escalation.

HR Director / People & Culture Director

when the incident concerns employees, managers, a conflict, a report or the risk of an employment dispute.

Compliance Officer / Data Protection Officer / Head of Security

when the matter requires risk qualification, securing material and coordinating actions across areas.

Management board member / General Counsel / COO

when the organisation needs a safe decision path, response documentation and control over the further course of the matter.

Stages of work

A predictable process in a situation that is usually unpredictable

In an incident, pace, order and good documentation matter. That is why we run the matter in stages – so the company knows what is happening now, what the next step will be and which decisions need to be prepared.

Rapid situation assessment

We gather the essential facts, identify urgent risks and determine the type of incident.

Organize the response and preserve evidence

We set out the investigation process, identify documents and information to preserve, and organize communications.

Recommendations and management decisions

We analyze findings, assess risks and prepare response options for the board or responsible decision-makers.

Close the matter and capture lessons

We help close the matter, prepare final documentation and identify corrective steps to reduce the risk of recurrence.

Schedule a quick incident-response consultation.

Do you have an incident, a report or a breach?

The earlier the company establishes what to secure, who decides and how to run communications, the lower the risk of chaos, escalation and decisions that cannot later be defended.

Briefly describe the situation: what the incident concerns, when it was detected, which departments are involved and whether any first steps have already been taken. We will come back with information on how we can help order the response and next steps.

Mateusz Sawaryn

They will follow up with any questions or recommend a next step.

Quick response

We usually respond within two hours on business days.