What you get
Five questions owners and CEOs bring to us, and the answer you will get.
Discuss your situation- “How many days can we keep working without ERP and CRM?”A process map: what stops in the first hour, on the first day and after a week, and how to work manually.
- “Can we restore from backups, and how long will it take?”A recovery test with your IT team: the actual time against the stated time.
- “How do we take orders and ship goods without systems?”Paper forms, a procedure for manual record-keeping and backup channels to reach customers and suppliers.
- “Who tells customers what in the first hours?”A response plan: roles, decisions, message texts for customers, employees and partners.
- “How much will we lose?”The loss and the cost of a day of downtime in roubles, the weak spots and what to fix first. Findings for the owner on two pages.
What stops when ERP and CRM are encrypted
An illustrative company: sales, the warehouse, production and accounting all run through one server room. In the report the diagram is built from your processes and systems.
- data encrypted
- department cut off from the systems
- 1Sales and customers. Orders, contracts and customer history in the CRM.
- 2Warehouse and shipping. Stock levels, delivery notes, routes.
- 3Production. Work orders, formulations, quality control.
- 4Accounting and procurement. Invoices, payments, payroll.
- 5Server room. ERP, CRM, email and backups on one network.
- First hourNo orders takenCRM and email are down
- 4 hoursWarehouse cannot see stockshipments stop
- 1 dayInvoices and paymentspurchasing and payments stopped
- 3 daysProduction without work orderscustomers go to competitors
- 7 daysPayroll and reportingcontract penalties
Why it is worth acting now
An attack takes hours, and preparing for it takes five weeks. Here is what 2026 research says.
- Ransomware is on the rise.In the first quarter of 2026 the number of ransomware attacks on Russian companies grew by 20%, and the number of incidents in industry and transport by 24%.Kaspersky, 3 June 2026
- An attack stops the whole business, well beyond one IT system.In 98% of ransomware and wiper attacks, core business processes were disrupted. Losses at large companies ranged from RUB 50 m to RUB 1.5 bn.Positive Technologies, Vedomosti, 14 October 2026
- A backup is no guarantee of recovery.Attackers get to the backups too. Almost half of attacks come with a data leak, and since 30 May 2025 a repeat leak of personal data can bring a turnover-based fine.Vedomosti, 14 October 2026
- What you can do this week.Check that one backup copy is kept offline, print out the contacts of key customers and suppliers, and agree a backup communication channel for management.
How the work runs and when you get the result
Five weeks from the first meeting to the findings for the owner. Every step ends with a document that stays with you.
- Week 1Kick-off and NDAProcesses, systems, backups, key contracts.
- Week 2Interviews and process reviewSales, warehouse, production, finance, IT.First findings: three weak spots and the cost of a day of downtime
- Week 3Recovery testYour IT team restores a system from a backup, and we time it.
- Week 4Exercise without systemsManagement and key departments work through the attack scenario for three hours.
- Week 5Findings for the ownerWeak spots, losses in roubles, a plan, paper forms.
From your people: IT, one or two days for the recovery test; the heads of sales, warehousing, production and finance, 1–2 hours of interview each; management, three hours for the exercise.
Loss in money before and after measures
We choose the measures together with your IT team and management and rank them by loss reduction per rouble spent.
An illustrative example: a trading and manufacturing company with revenue of RUB 9 bn a year.
What you keep
Four documents used by the owner, management, IT and key departments. The figures in the examples are illustrative.
Weak spots, losses in roubles and what to fix first.
What stops and when, and how to work manually.
Actual recovery time and what shortens it.
Roles, message texts, forms for manual work.
Why clients trust us
We see the company’s processes, contracts and weak spots. So we agree the rules for handling information and access before we start.
- NDA before the first working meeting.We sign your non-disclosure agreement or offer ours.
- Only your IT team has access to the systems.We do not ask for administrator rights. Your IT team restores from a backup on a test environment or in an agreed window, and we do not stop live systems.
- Your information stays with you.We hand the report over to you. On our website and in talks we use only anonymised examples.
- Experience.Evgeny Telenkov: more than 20 continuity plans for the sites of a large mining and metals company, Chief Risk Officer of a USD 20 billion petrochemical megaproject, Deputy Chair of Rosstandart Technical Committee 010 “Risk Management”, co-author of six GOST R standards.
- Industries.Mining and metallurgy, oil, gas and petrochemicals, telecoms, industrial manufacturing.
- External security testing — on request.A specialist information security partner runs the penetration test and the simulated attack under a separate contract and NDA with you.
Pricing
The price is for one company or one site with a shared IT landscape. We will send a cost estimate for a group of companies within two working days.
If you order Turnkey BCM within six months, half the cost of the check is credited.
- One company or site — RUB 990,000.Processes, a recovery test, an exercise and findings for the owner.
- Two checks together — RUB 1,690,000 instead of RUB 1,980,000.Ransomware and drone strike: the IT landscape and the site, one set of findings for the owner.
- External security testing — on request.A penetration test and a simulated attack carried out by a partner. The price is set after a meeting, once the scope is clear.
- Prices exclude taxes.The final amount is fixed in the contract.
- Travel expenses.Agreed before work starts.
Frequently asked questions
Will you hack into our systems?
No. The readiness check looks at how the company would get through an attack: processes, backups, management decisions. If you need external security testing, a specialist partner runs the penetration test and the simulated attack under a separate contract and NDA.
Will you shut down our ERP for the check?
No. We test recovery on a test environment or in an agreed window. Your IT team carries out every action in the systems; we observe and time it.
We have an information security team and backups. Why do we need a check?
The information security team protects against an attack. The check answers a different question the owner has: what happens if the protection fails. How sales and the warehouse work without systems, how long data recovery really takes and what each day of downtime costs.
What information do you need, and who sees it?
A list of processes and systems, your backup procedure, key contracts with customers and suppliers. Everything is shared under a non-disclosure agreement, and the report stays with you.
Can we just talk the situation through first?
Yes. The first 30-minute Zoom call commits you to nothing: we look at your situation and tell you whether you need the check and in what scope.
How is the check different from Turnkey BCM?
The check looks at one scenario in five weeks and ends with findings for the owner. Turnkey BCM builds a continuity system for the whole company: plans, roles, exercises, metrics. Half the cost of the check is credited if you move on to the programme.
Can this be combined with the drone strike check?
Yes. The two checks together cost RUB 1,690,000 instead of RUB 1,980,000, excluding taxes, with one set of findings for the owner.
How to start
Three steps to the start. We hold meetings on Zoom and correspond on Telegram and by email.
- 01RequestLeave your name and work email. We will reply within one working day.
- 02Zoom call, 30 minutesWe go through your situation and your questions. If needed, we sign an NDA before the call.
- 03Estimate and contractWe send a cost estimate and the list of data we need to start.
Get a cost estimate or discuss on Zoom
Tell us briefly about your company and systems. We will reply within one working day with a cost estimate or a link to a Zoom call. If needed, we will sign an NDA before the call.