Identity cannot be trusted
Normal sign-in may fail or need to be disabled after compromise.
More context
Users may be unable to sign in - or the organisation may deliberately stop trusting the primary identity platform.
EU-SOVEREIGN · INDEPENDENT CRISIS COMMAND CENTRE · IN DEVELOPMENT
A warm, EU-sovereign workspace on a separate technology stack for two priorities at once: coordinated incident response and continued essential business operations. The Main Crisis War Room guides the situation, while dedicated Sub-War Rooms give IT, finance, operations, customer and communications teams the collaboration, office tools, protected information and communication they need. Designed to be clear even on first use.
THE PROBLEM
A serious disruption can affect the identity, communication, documents and office tools that both incident responders and everyday business teams rely on. They need a separate place to work, coordinate and make decisions while systems are restored.
Normal sign-in may fail or need to be disabled after compromise.
Users may be unable to sign in - or the organisation may deliberately stop trusting the primary identity platform.
Internal teams, external specialists and stakeholders must still communicate, collaborate and receive approved updates.
Email, chat and meetings may be unavailable or unsafe just when incident management, IT, security and recovery partners most need to communicate and coordinate restoration. Customers, suppliers, authorities and the media still need accurate updates. Everyday communication channels and recipient lists may no longer be available.
Recovery plans, contacts and essential business records may be trapped in affected applications.
Customer lists, supplier details, finance documents, contracts and response plans may all be trapped inside the affected applications.
Crisis-management software helps manage the process. EU Anchor provides the independent workspace where technical teams organise recovery and essential business teams continue work, using communication, documents, tasks, meetings and office tools in one place.
PROTECTED OPERATIONAL COPIES
Incident responders and critical business teams use a shared crisis platform without waiting for primary systems to be restored. Role-specific War Rooms bring together messaging, meetings, tasks, document collaboration, office tools and protected recovery plans, contacts and business records. Retained historical versions help authorised teams work from trusted information.
An independent communication and collaboration platform for incident managers, IT, security teams and recovery partners. Work with protected recovery plans, technical contacts, system dependencies and runbooks; coordinate restoration tasks, share status and record decisions.
Approved finance documents, important contacts, payment references and critical procedures for urgent work and decisions.
Customer directories, contracts, commitments, addresses and service information to support priority customers and approved updates.
Supplier lists, contracts, open orders, emergency contacts and key delivery documents to handle urgent supply needs.
HOW THE SOLUTION WORKS
Already prepared, not deployed after an attack. EU Anchor stays in warm standby with independent identities, authorised War Rooms, communication channels, collaboration tools and protected information. Readiness checks cover access, service availability, information freshness and exercises. On activation, both recovery teams and essential business teams have a familiar place to work.
Define incident roles, a Main Crisis War Room, optional Sub-War Room templates, external participants, escalation paths and communication responsibilities.
Maintain versioned, source-protected copies of recovery plans, contacts, customer, supplier and finance data. Monitor refresh status and keep earlier trusted versions available.
Activate the warm environment through independent crisis login and MFA. Confirm a trusted information version and bring the prepared teams into their role-specific rooms.
Lead from the Main War Room while specialist and business teams use Sub-War Rooms to restore systems, continue urgent work, assign actions, collaborate on documents and communicate.
Record decisions, owners, actions, approved status updates and evidence across the incident for later review.
CRISIS WAR ROOMS
One Main Crisis War Room for direction, decisions and the overall situation. Dedicated Sub-War Rooms for recovery teams and essential business functions - with messaging, meetings, shared actions, documents and office tools where people actually work.
Crisis leadership · Situation overview · Priorities · Decisions · SITREP
Systems · Identity · Restoration
Chat · Tasks · FilesERP · Customers · Suppliers
Chat · Tasks · FilesEmployees · Partners · Press
Chat · Tasks · FilesIllustrative workflow structure · EU Anchor Crisis Workspace is in development.
Visual boards to prioritise tasks, assign owners, set deadlines and identify blocked work.
Group messaging, meetings and working files within each authorised team’s room.
Trusted procedures, contact directories and retained versions of critical documents.
Record responsibilities, decisions, SITREPs and approved updates for the Main War Room.
DESIGNED FOR FIRST-TIME USE
Most designated crisis users enter EU Anchor only after activation; a small group of customer administrators maintains the standby environment beforehand. A clear, role-specific War Room view prioritises urgent actions, the day's meetings, important messages and recent documents and rooms - with communication, contacts and office tools within easy reach.
Short orientation sessions and practical exercises help teams verify their access and feel prepared before a real incident.
CORE CAPABILITIES
One independent workspace for both incident recovery and critical business work: communicate, meet, manage tasks, collaborate on files and office documents, make decisions and retain evidence.
One Main War Room. Dedicated teams and action boards.
A central Main Crisis War Room supports incident leadership, with controlled Sub-War Rooms for IT recovery, operations, communications and approved external specialists. Teams work with messaging, meetings, visual Kanban boards, assignments, deadlines, protected documents and decisions. Access to each room is controlled, and relevant updates can be shared with the Main War Room. See the War Room model.
Crisis access without your primary identity provider.
Pre-enrolled identities, independent MFA, controlled roles and tested emergency access without relying on the customer’s primary IdP. Access during IdP compromise and session revocation form part of the design requirements.
Protected versions. Trusted recovery.
Critical plans, contacts and selected business records are preserved in a separate, protected environment. Compromised source systems cannot overwrite retained versions. If recent information may be compromised, authorised incident leaders can review and select an earlier trusted snapshot-subject to integrity checks, approval and defined retention rules-without waiting for primary systems to be restored.
Critical work continues while ERP and CRM are unavailable.
Give authorised finance, customer, operations and supplier teams a place to communicate, work on documents, assign urgent tasks and use protected information while primary applications are unavailable.
Decisions, approvals and evidence in context.
Make recording decisions easy: capture the decision, owner, reason, approvals and evidence in context, with an incident timeline for later review and reporting.
Approved third parties in controlled rooms.
Invite approved recovery partners, suppliers, external advisers and other participants into controlled workspaces.
Prepared crisis email and stakeholder channels.
Plan separate crisis email and other approved outbound channels for customers, suppliers, partners, authorities and press. Identify recipients, approve messages and preserve communication records.
Readiness exercises, actions and evidence exports.
Recovery-team exercises, action tracking, incident situation reports and evidence exports to support governance and relevant regulatory processes.
ONE INCIDENT. ONE INDEPENDENT ENVIRONMENT.
A ransomware scenario: primary identity, mail and collaboration cannot be trusted, and ERP/CRM is unavailable for 48 hours. Two activities run together: IT and security teams organise recovery, while business teams keep priority finance, customer, supplier and operational work moving. The Main Crisis War Room maintains the shared situation.
Pre-enrolled crisis leaders sign in with separate MFA, validate the information snapshot and activate the prepared Main Crisis War Room.
An IT Recovery Sub-War Room coordinates containment and restoration, using protected runbooks, conversations and assigned tasks.
Operations, finance and customer teams use their War Rooms to coordinate urgent tasks, collaborate on documents, communicate with suppliers and continue priority work from protected information copies.
The Communications Sub-War Room coordinates stakeholder updates across crisis email, SMS and voice channels. Leadership tracks key decisions and escalations in the Main War Room.
INTERNAL & EXTERNAL COMMUNICATION
Crisis coordination is only half the job. A dedicated Communications War Room helps authorised teams keep customers, suppliers, partners, authorities and press informed through prepared, independent channels - even when normal workplace communications are unavailable.
Protect approved customer, partner, supplier, authority and media directories independently of your primary systems.
Define audience, owner, approved wording and required internal checks before external communication.
Use the communication method suited to the situation: crisis email, SMS notifications, telephone meeting access or emergency voice calls. Different channels require working networks, and no channel guarantees delivery in every scenario.
Capture communication decisions, timestamps, recipients and the available delivery evidence for incident review and reporting.
EMERGENCY VOICE & SMS
Prepared alternatives when everyday telephony, email or collaboration services are unavailable.
Independent voice connectivity through an approved SIP provider.
Phone access to crisis meetings where SIP bridge services are configured.
Prepared alert groups and message templates for essential contacts.
Track available network delivery reports; confirmations require separate workflows.
SMS is not a confidential channel, so sensitive information stays inside the protected workspace. Telephone access requires available network connectivity, and a SIP meeting bridge is distinct from a complete telephone system.
Customers & suppliers · Business partners · Public authorities · Press & media · Recovery specialists
NIS2 & DORA
Capture decisions, actions and stakeholder communications as the incident progresses, providing a structured trail for internal review and relevant reporting.
EU Anchor supports incident response, evidence management and related NIS2/DORA processes; it does not itself establish an organisation’s compliance.
OPERATIONAL RESILIENCE & REGULATION Manage the incident. Capture the evidence as you work. Structured incident records-including decisions, owners, approvals, actions and stakeholder communications-support after-action review, management oversight and evidence preparation for relevant NIS2 and DORA processes. NIS2 Supports capabilities relevant to business continuity, incident response, preparedness and evidence. DORA For financial entities, supports operational-resilience capabilities relevant to ICT disruption and recovery. Governance & evidence Keep decisions, responsibilities, incident records and communications accessible for internal review and reporting.
SEPARATE TECHNOLOGY STACK
EU Anchor's crisis identity, MFA, administration and core collaboration are independent of the primary Microsoft 365, Entra ID, Okta or ERP/CRM environment. Controlled break-glass access and crisis-session revocation support response to both outages and active compromise. Working devices, connectivity and configured external delivery channels are still required and must be tested.
WHO IT'S FOR
For incident managers, IT and security responders, recovery partners, crisis leadership, communications and compliance - and for finance, customer service, sales and procurement teams performing selected urgent tasks during recovery. External specialists and affected stakeholders can be involved in controlled ways.
COMMON QUESTIONS
How the independent crisis environment works, stays ready, protects trusted information and supports teams through recovery.
EU Anchor is a fully EU-owned, EU-sovereign crisis and recovery workspace that remains separate from an organisation’s primary digital systems. A prepared Main Crisis War Room gives incident leaders an overview of priorities and decisions, while controlled Sub-War Rooms help designated teams coordinate restoration and essential business work. Independent access, communication and protected information are designed to remain available when normal systems cannot be trusted. The experience is intended to be intuitive even for first-time users.
A crisis workspace must not share the same critical points of failure as the systems it supports. EU Anchor runs on a separate, EU-controlled technology and hosting stack, with its own identity and communication services. This separation reduces the risk that a failure, cyberattack or administrative compromise affecting the primary environment will also disable the organisation’s recovery workspace. The separate environment is prepared and tested before it is needed.
No. Your teams keep using their everyday workplace and business applications. EU Anchor provides the separate crisis environment for incidents in which those systems are unavailable, compromised or cannot be trusted. It supports both technical recovery and selected critical business activities until the primary systems are safely restored.
No. Backups and disaster-recovery tools restore data, applications and infrastructure. EU Anchor is where the people responsible for that restoration communicate, work together, find recovery instructions, assign actions and record decisions. At the same time, authorised business teams can use protected information copies to perform essential temporary tasks while normal applications are unavailable.
EU Anchor Crisis Workspace brings a Main Crisis War Room and dedicated team rooms together with secure messaging, meetings, crisis email, voice and SMS communication, shared actions, office tools, protected documents, contacts and decision records. This independent working environment supports both technical recovery and continued essential business operations. Pilot functionality is limited; full availability is planned for 2027.
No. EU Anchor uses separately managed crisis identities and independent multi-factor authentication (MFA), rather than relying on the organisation’s primary Entra ID or Okta sign-in. Authorised users are enrolled before an incident. Administrators also have a controlled break-glass access procedure, independent of the primary identity provider.
Crisis users continue to authenticate through their separate EU Anchor identity and MFA. Their access does not depend on trust in the compromised provider. EU Anchor administrators can manage crisis access and revoke affected EU Anchor sessions using the independent administration path. The organisation should verify these procedures through regular exercises.
Once prepared, the crisis workspace provides access to its stored information and core collaboration services without requiring the primary identity, email, file, ERP or CRM systems to function. Before an incident, optional, controlled imports can keep selected information up to date. EU Anchor still requires a working device and suitable connectivity for remote communication, and any external delivery or payment channels must also be available.
EU Anchor is a warm, preconfigured crisis environment-not a new system that must be installed after an attack. Users, access rights, communication rooms, contact lists and protected documents are prepared in advance. When an incident occurs, authorised staff activate the relevant crisis procedures, confirm the information versions to use and begin coordinating recovery. “Ready in minutes” refers to activating the prepared workspace, not restoring the primary systems.
Customers select the information their organisation needs to respond and operate temporarily: incident and recovery plans, system contacts, employee and supplier directories, customer lists, agreements, finance procedures, emergency contacts and other approved critical documents or datasets. Access and retention are configured according to each team’s role and the sensitivity of the information.
EU Anchor supports controlled refreshes from approved sources, including scheduled, read-only source integrations where configured, as well as manual uploads. Imported documents and selected data, user details and role information are versioned and checked against the access rules defined for the crisis environment. The readiness view shows when each dataset was last refreshed. Importing data does not give the primary system control over the protected archive.
Yes. Preserved versions allow authorised incident leaders to review and select an earlier snapshot rather than automatically using the latest copy. The selection is a controlled decision, supported by timestamps, version history and validation procedures. An older version is not automatically safe; teams must assess its integrity before relying on it. Changes made during the incident can be recorded separately for later reconciliation.
Protected versions are stored separately from the primary environment and are read-only to ordinary crisis users and the source systems. The source cannot simply delete or overwrite retained versions when it becomes compromised. Authorised retention, legal deletion and administrative recovery remain governed by controlled policies, so “protected from ransomware deletion” does not mean the data can never be lawfully removed.
EU Anchor uses EU-controlled hosting, encryption in transit and at rest, separate authentication, role-based access, restricted external sharing and auditable actions. Customers define the necessary data scope, retention periods and authorised users, including for personal information and confidential business records. Each deployment must verify access permissions, backup protection, information refreshes and safe handling of sensitive datasets.
A readiness dashboard shows the health of the crisis environment, enrolled users, access-role status, the latest successful information updates, any failed refreshes, and the status of important plans and documents. It also helps track the date and outcome of the latest exercise. This gives designated owners a practical way to address readiness gaps before an actual incident.
Yes. EU Anchor supports exercises covering activation, independent login, access permissions, document freshness, recovery coordination and external communication. We recommend a documented readiness review and practical exercise at least annually, and after major changes to the organisation, technology or crisis plan. Include first-time users so that usability is tested under realistic conditions.
EU Anchor is designed to make essential tasks understandable on first use through role-specific starting points, clear actions and minimal navigation. A short, optional 30-minute orientation helps users gain confidence. Organisations can also run annual refresher sessions and record completion for their internal readiness programmes. Exercises remain important even when the software itself is simple to use.
Usually not. Pre-enrolled users typically include incident management, IT and security recovery, crisis leadership, communications, legal and compliance, and designated Finance, Customer Service, Procurement or other critical business teams. Selected external specialists may receive restricted access. Each user sees only their authorised information and workspaces; customers, authorities and the press can receive approved communications without accessing the internal environment.
They bring internal responders and approved outside specialists into a secure, independent incident workspace. Teams use recovery plans, step-by-step technical procedures, key contacts, chat, meetings and task tracking to coordinate containment and restoration. Incident leaders monitor progress, record decisions and keep crisis leadership informed. Technical repairs themselves are performed in the organisation’s specialist recovery tools.
Crisis leaders use one controlled incident view to follow the situation, set priorities, assign responsibilities, request status updates and approve important decisions or external messages. Decisions are captured with their owner, time and supporting information, giving leadership a clearer picture during the incident and a usable record afterwards.
Yes. Approved specialists can join designated crisis rooms using controlled, time-limited access and their own independently verified identity. They receive only the contacts, documents, discussions and tasks needed for their assignment. Access can be reviewed or revoked without depending on the organisation’s compromised workplace.
Designated Finance users can access protected copies of critical procedures, supplier and bank contacts, financial documents and approved payment references. They can reach approvers, coordinate emergency work and document decisions. Actual payments still use an available, independently authenticated and approved banking channel; emergency records can be reconciled with ERP after recovery.
Customer-facing teams can use approved copies of priority customer and mailing lists, contact details, contracts, service commitments and response guidance. They can coordinate urgent customer matters, approve outgoing messages using independent crisis communications and record what was communicated. Activity recorded during the incident can be reconciled with CRM once it is restored.
Authorised teams can access protected supplier and mailing lists, emergency contacts, contracts, order references, alternate suppliers and emergency purchasing procedures. They can collaborate on urgent sourcing and deliveries, contact external suppliers and record decisions and commitments for later reconciliation with procurement and ERP systems.
Yes. Organisations can prepare role-specific crisis workspaces for other teams, such as HR, Facilities, Operations or Legal, and select the critical contacts, records, procedures and communication channels they need. The scope is tailored to the organisation’s emergency processes; EU Anchor does not need to recreate each team’s everyday business application.
The Main Crisis War Room brings crisis leadership together around the situation, priorities and decisions. Dedicated Sub-War Rooms give IT recovery, essential operations, customer teams, communications and approved external specialists their own conversations, tasks and documents. Relevant updates can be shared with leadership through controlled workflows; access to one room does not automatically grant access to the others.
Visual task boards help each War Room assign responsibilities, prioritise actions, track deadlines and identify blockers alongside chat, meetings and documents. Kanban provides a view of work in progress; the decision log separately preserves key decisions, approvals and evidence.
EU Anchor Crisis Workspace brings together communication options such as emergency email, SMS notifications, telephone dial-in to crisis meetings and voice calling. SMS delivery status does not prove that a person has read or acknowledged a message, and sensitive information belongs inside the protected workspace. The pilot has limited functionality; full availability is planned for 2027.
Communications teams use prepared stakeholder lists, mailing groups, holding statements and approval workflows to coordinate messages with crisis leadership. Approved communications can be sent through separately configured crisis email and other available channels to customers, suppliers, partners, public authorities and the press. Messages, approvals, recipients and delivery results can be recorded against the incident.
Simple workflows capture decisions, responsible people, approvals, time, rationale, related tasks and supporting documents as part of normal crisis work. Incident logs and communication records can be reviewed and exported for post-incident analysis, internal governance, contractual reporting and relevant regulatory processes. Users should not have to reconstruct key decisions after the event.
EU Anchor is fully EU-owned, with EU-based hosting, backups, operations, administration, support and legal and technical control. Its critical crisis services-including identity, email, messaging, video and protected information-use a separate EU-controlled operating environment. Sovereignty covers who owns, operates and can access these services, not simply where data is stored. EU Anchor publishes the applicable supplier and control information through its European Control approach.
EU Anchor supports incident response, crisis coordination, continuity planning, recovery cooperation and the collection of evidence relevant to NIS2 and DORA processes. Records of decisions, actions, approvals and stakeholder communications help organisations prepare reviews and incident-related reports.
Yes. EU Anchor can discuss your requirements and, where appropriate, introduce specialist implementation or advisory partners to help define roles, crisis procedures, essential information, access rights, exercises and readiness reviews. Contact us through the website contact form to discuss professional-services support.
Discuss professional-services support →EU Anchor serves organisations where loss or compromise of the digital workplace creates serious operational risk. It is particularly relevant to organisations dependent on Microsoft 365, Google Workspace, Entra ID, Okta, ERP or CRM, and to regulated businesses, critical infrastructure, public-sector bodies and others with defined incident-response or continuity responsibilities.
Full availability of EU Anchor Crisis Workspace is planned for 2027. Organisations can enquire about joining the Pilot Program now. Pilot functionality is limited, and the available scope and pricing are agreed individually.
Learn about the Pilot Program →PILOT INTEREST
We are welcoming additional organisations into the pilot program. Explore how a defined set of independent crisis capabilities can improve your preparedness, what participation involves and how the pilot is priced.
CO-FUNDED DEVELOPMENT
EU Anchor has received co-funding for the development of EU Anchor Crisis Workspace from the European Union, the Danish Resilience Agency and the Danish Business Authority.
Funding acknowledgements do not imply endorsement of EU Anchor or claims made on this website by the organisations shown.