Access to Funds and Working Systems

Online banking, corporate email, accounting software, CRM, an online shop, cloud files and administrator accounts directly affect sales and payments. Each system should have a responsible employee, backup contact and clear access-recovery procedure. Administrative rights remain with the company itself even where day-to-day maintenance is performed by an external IT contractor.

Each employee receives an individual account and access only to information required for the role. Multi-factor authentication is advisable for banking, qualified electronic signatures, primary email and administrative accounts. When a person changes role or leaves, user rights are closed on the date of the HR change while corporate files and correspondence remain with the company.

A separate rule is needed for payments. A change in supplier bank details, a material amount or an unusual urgent instruction is confirmed through a second communication channel. This protects company funds without complex bureaucracy and gives the accountant a clear basis for making the payment.

Ownership of the domain, recovery phone number, primary mailbox and cloud accounts is documented separately. Registration data and backup contacts remain with the director or another authorised person of the company. This allows the technical provider to be changed without losing the domain, email, advertising accounts or customer database.

Backups and Agreements with IT Providers

Backups of accounting data, agreements, email and customer data are stored separately from the primary working system. Data that changes daily is backed up more frequently; a different schedule may be sufficient for the charter, corporate resolutions and continuing agreements. Restoring several files or a test database shows the real time required to return the company to operation.

An agreement with an IT provider should expressly identify the systems it maintains, response time, administrative rights, handover procedure for access credentials and how data are returned at the end of the relationship. The domain, main corporate email, cloud accounts and backups should be registered to the company or kept under its direct control.

Customer and employee personal data are available only to persons who need them for work. Commercial files are also distributed according to job authority. Employees need only a short instruction: individual account, separate password, second channel for unusual payments, and prompt reporting of suspicious messages or a lost device to the responsible person.

Actions After a Cyber Incident

After loss of access or a suspicious payment, information must be escalated quickly to the responsible person. For a banking incident, the company contacts the bank immediately; for compromised email, credentials and connected access are changed; an infected device is disconnected from working systems and data are restored from a clean backup.

Contact details for the bank, IT provider, director and backup administrator are also stored outside the main corporate email. Recovery codes and the access-restoration procedure are available to two authorised persons. In this arrangement, one lost phone or password stops only one access path while the company can continue payments, sales and customer work.

Law of Ukraine No. 2163-VIII establishes the state framework for cybersecurity and certain requirements for relevant categories of entities. For an ordinary company, practical results come from access allocation, backups, agreements and responsible persons. UBC can prepare corporate rules, contractual provisions and the personal-data document set, while the technical specialist implements the agreed configuration.

The event time, emails, bank messages, payment references and internal correspondence are retained as a separate package. Using these materials, management can contact the bank, provider, insurer or law-enforcement authority depending on the nature of the incident. The responsible person simultaneously records which access rights have been changed and which systems have returned to operation.