Druva Logo

The Recovery Orange Book

Law Enforcement Reporting

List of Law Enforcement Agencies, Governmental Bodies, Cybersecurity Organizations (to be notified)

North America

United States of America

  • Department of Justice (DOJ)

    • The DOJ investigates and prosecutes cybercrime. While not a first-responder, they become involved in significant cases.

    • Contact Information:

    • Turnaround Time: Involvement and turnaround time vary greatly depending on the scope and impact of the attack.

  • Federal Bureau of Investigations (FBI)

    • The Internet Crime Complaint Center (IC3) is the central hub for reporting cyber-enabled crime. It is run by the FBI, the lead federal agency for investigating crime.

    • The FBI has 56 field offices (also called divisions) centrally located in major metropolitan areas across the U.S. and Puerto Rico. They are the places where we carry out investigations, assess local and regional crime threats, and work closely with partners on cases and operations.

    • Turnaround Time: Involvement and turnaround time vary greatly depending on the scope and impact of the attack. Always start with the closest geographic local FBI officer.

  • State and Local Law Enforcement (e.g., State Police, Local Police Departments)

    • For attacks impacting local systems or specific communities.

    • Actionable Steps: Contact your local police department's cybercrime unit or state police.

    • Contact Information: Varies by locality; search for local police department websites.

    • How quickly to contact: Immediately after discovering the attack, especially if there's a physical component or immediate threat.

    • Typical Turnaround Time: Initial response can be quick, but investigations can be lengthy.

Canada

  • Canadian Centre for Cyber Security (Cyber Centre)

    • Canada's authority on cyber security, providing advice, guidance, and services.

    • Contact Information:

    • How quickly to contact: Report significant cyber incidents as soon as possible.

    • Typical Turnaround Time: Aims to provide prompt support and advice.

Mexico

  • National Guard (Guardia Nacional)

    • Handles cybercrime investigations and prevention.

    • Contact Information:

      • Website: https://www.gob.mx/guardianacional (Look for cybercrime units or contact information for digital crimes)

    • How quickly to contact: Immediately for severe cyber incidents.

    • Typical Turnaround Time: Varies by case complexity.

Europe

Germany

  • Federal Office for Information Security (BSI)

    • The central cybersecurity authority in Germany, providing warnings, prevention, and support for IT security incidents.

    • Contact Information:

    • How quickly to contact: As soon as possible after detecting a significant incident.

    • Typical Turnaround Time: Initial advice and support can be provided quickly; deeper assistance depends on the case.

France

  • National Agency for the Security of Information Systems (ANSSI)

    • ANSSI is responsible for cybersecurity and provides incident response assistance.

    • Contact Information:

    • How quickly to contact: Promptly report serious incidents.

    • Typical Turnaround Time: Response times can vary based on the severity and national importance of the incident.

Netherlands

  • National Cyber Security Centre (NCSC-NL)

    • The NCSC-NL is the Dutch national expert center for cybersecurity.

    • Contact Information:

    • How quickly to contact: Report serious cybersecurity incidents as soon as possible.

    • Typical Turnaround Time: They aim to provide initial support quickly.

United Kingdom

  • National Cyber Security Centre (NCSC)

    • The NCSC provides advice and support for public and private sector organizations on how to respond to cyber incidents.

    • Contact Information:

    • How quickly to contact: As soon as possible for significant cyber incidents.

    • Typical Turnaround Time: Aims for quick initial response and ongoing support.

Italy

  • Italian National Cybersecurity Agency (ACN)

    • The national agency responsible for cybersecurity, coordinating incident response and prevention.

    • Contact Information:

    • How quickly to contact: Promptly report serious cyber incidents.

    • Typical Turnaround Time: Varies by incident.

Spain

  • National Cybersecurity Institute (INCIBE)

    • INCIBE is a reference institution for cybersecurity development and incident response.

    • Contact Information:

    • How quickly to contact: For incidents affecting individuals and SMEs, as well as significant incidents.

    • Typical Turnaround Time: Provides prompt advice and support.

Sweden

  • Swedish Civil Contingencies Agency (MSB) / CERT-SE

    • CERT-SE is the national Computer Emergency Response Team, handling incident coordination.

    • Contact Information:

    • How quickly to contact: Report incidents as soon as possible.

    • Typical Turnaround Time: Provides guidance and coordination for incident response.

Poland

  • Computer Emergency Response Team Poland (CERT Polska)

    • CERT Polska is part of the Research and Academic Computer Network (NASK) and handles cybersecurity incidents.

    • Contact Information:

    • How quickly to contact: Report incidents as soon as possible.

    • Typical Turnaround Time: Provides initial analysis and support.

Ireland

  • National Cyber Security Centre (NCSC Ireland)

    • The NCSC Ireland is responsible for national cybersecurity and incident response.

    • Contact Information:

    • How quickly to contact: Report significant incidents as soon as possible.

    • Typical Turnaround Time: Aims to provide prompt advice and support.

Belgium

  • Centre for Cybersecurity Belgium (CCB)

    • The CCB is the central authority for cybersecurity in Belgium.

    • Contact Information:

    • How quickly to contact: Report incidents as soon as possible.

    • Typical Turnaround Time: Provides advice and coordinates incident response.

Switzerland

  • National Cyber Security Centre (NCSC)

    • The Swiss NCSC is the contact point for cyber incidents and provides recommendations.

    • Contact Information:

    • How quickly to contact: Report significant incidents promptly.

    • Typical Turnaround Time: Aims for quick initial response.

Norway

  • Norwegian National Cyber Security Centre (NCSC Norway)

    • NCSC Norway is the national competence center for cybersecurity.

    • Contact Information:

    • How quickly to contact: Report serious incidents as soon as possible.

    • Typical Turnaround Time: Provides advice and assistance.

Asia

Japan

  • National center of Incident readiness and Strategy for Cybersecurity (NISC)

    • NISC is the command center for government-wide cybersecurity policy and incident response.

    • Contact Information:

    • How quickly to contact: For incidents affecting critical infrastructure or national security.

    • Typical Turnaround Time: Varies based on incident severity.

South Korea

  • Korea Internet & Security Agency (KISA)

    • KISA is responsible for information security and incident response.

    • Contact Information:

      • Website: https://www.kisa.or.kr/eng/main.jsp

      • Phone: 118 (Cybercrime Report Center, domestic only)

    • How quickly to contact: Immediately for significant incidents.

    • Typical Turnaround Time: Prompt initial response and ongoing support.

Singapore

  • Cyber Security Agency of Singapore (CSA)

    • CSA is responsible for overseeing national cybersecurity strategies and incident response.

    • Contact Information:

    • How quickly to contact: For incidents affecting critical information infrastructure or national interests.

    • Typical Turnaround Time: Varies based on severity.

India

  • Indian Computer Emergency Response Team (CERT-In)

    • CERT-In is the national agency for responding to computer security incidents.

    • Contact Information:

    • How quickly to contact: Report significant incidents as soon as possible.

    • Typical Turnaround Time: Provides initial alerts and coordination.

China

  • National Computer Network Emergency Response Technical Team/Coordination Center of China (CNCERT/CC)

    • CNCERT/CC is the national computer emergency response team responsible for cybersecurity incident response and coordination.

    • Contact Information:

      • Website: http://www.cert.org.cn/publish/english/

    • How quickly to contact: For significant incidents affecting critical infrastructure or national security.

    • Typical Turnaround Time: Varies based on incident severity and impact.

Israel

  • Israel National Cyber Directorate (INCD)

    • The INCD is responsible for national cybersecurity, incident response, and threat intelligence.

    • Contact Information:

    • How quickly to contact: Report significant cyber incidents as soon as possible.

    • Typical Turnaround Time: Provides guidance and coordination for incident response.

United Arab Emirates

  • UAE Cyber Security Council

    • The council oversees cybersecurity strategies and incident response for the UAE.

    • Contact Information:

      • Website: https://cyber.gov.ae/

    • How quickly to contact: For incidents affecting national security or critical infrastructure.

    • Typical Turnaround Time: Varies by incident.

Saudi Arabia

  • National Cyber Security Authority (NCSA)

    • The NCSA is responsible for enhancing the Kingdom's cybersecurity.

    • Contact Information:

    • How quickly to contact: Report significant cyber incidents promptly.

    • Typical Turnaround Time: Provides guidance and coordination.

Qatar

  • National Cyber Security Agency (NCSA)

    • The NCSA aims to protect Qatar's cyberspace and critical information infrastructure.

    • Contact Information:

South America

Brazil

  • Brazilian Cyber Defense Command (ComDCiber)

Argentina

  • National Directorate of Cybersecurity (DNC)

    • The DNC is responsible for coordinating cybersecurity policies and incident response.

    • Contact Information:

      • Website: https://www.argentina.gob.ar/jefatura/innovacion-publica/ciberseguridad

    • How quickly to contact: Report significant incidents as soon as possible.

    • Typical Turnaround Time: Provides guidance and coordination.

Colombia

  • National Cyber and Information Security Center (CSIRT-Colombia)

    • CSIRT-Colombia is the national computer security incident response team.

    • Contact Information:

    • How quickly to contact: Report serious cybersecurity incidents promptly.

    • Typical Turnaround Time: Aims for quick initial response and support.

Chile

  • National Cybersecurity Center (CSIRT Chile)

    • CSIRT Chile is the national cybersecurity incident response team, providing support and coordination.

    • Contact Information:

    • How quickly to contact: Report incidents as soon as possible.

    • Typical Turnaround Time: Provides guidance and support for incident response.

Peru

  • National Digital Government and Information Security Secretariat (SEGDI)

    • SEGDI is responsible for digital government, cybersecurity, and incident response coordination.

    • Contact Information:

      • Website: https://www.gob.pe/segdi

    • How quickly to contact: Report significant cyber incidents promptly.

    • Typical Turnaround Time: Varies by incident.

Ecuador

  • National Secretariat for Public Administration Security (SNASP)

    • SNASP oversees cybersecurity for public administration and coordinates incident response.

    • Contact Information:

      • Website: (Information often integrated within broader government security sites)

    • How quickly to contact: For incidents affecting public administration or critical infrastructure.

    • Typical Turnaround Time: Provides advice and coordination.

ANZ

Australia

  • Australian Cyber Security Centre (ACSC)

    • The ACSC is the Australian Government's lead agency for cyber security. It provides advice and assistance to Australian organisations and individuals to protect themselves from cyber threats.

    • Contact Information:

    • How quickly to contact: Report cyber security incidents and vulnerabilities as soon as possible.

    • Typical Turnaround Time: Aims to provide timely advice and support for incident response.

New Zealand

  • CERT NZ

    • CERT NZ is New Zealand's Computer Emergency Response Team, responsible for providing advice and support to businesses and individuals affected by cyber security incidents.

    • Contact Information:

    • How quickly to contact: Report cyber security incidents promptly.

    • Typical Turnaround Time: Focuses on providing quick initial response and guidance.