For business owners + executives
Watch a breach unfold — in 45 minutes. Live.
Most owners only see a cyber incident once — when it happens to them. In this 45-minute live walkthrough, Stefan Efros walks you through a real (anonymized) breach — minute by minute, decision by decision, dollar by dollar — so you know exactly what to do if your Tuesday goes wrong.
What you'll see
Five chapters. One incident. One Tuesday.
How the breach starts
Phishing email, vendor compromise, insider exfil — the three doorways that account for 80%+ of owner-business incidents. You'll see which signals were missed, what would have stopped it, and how much earlier the cost curve bends if you catch it at hour 0 instead of hour 4.
Who calls who, in what order
The first 4 hours decide the next 4 weeks. We walk through the call order — insurance, IR firm, legal, executive team, key customers — and the calls that get made wrong (calling the MSP first, calling the FBI first, calling counsel later) and the dollar cost of each ordering mistake.
Containment vs investigation
The mistake owners make under pressure is to start cleaning before they finish investigating. We show what gets destroyed when you skip forensics, what the carrier expects to see, and the three containment moves that don't wreck the evidence.
Rebuild, communicate, recover
What the insurance carrier really asks. What the SEC 8-K window looks like. What state breach-notification laws require. What customers need to hear and when. The communication mistakes that turn a 30-day incident into a 6-month brand crisis.
The aftershocks owners don't see coming
The insurance hike at renewal. The customer churn lag. The employee retention drop. The supplier audit requests. The board pressure to over-correct. The quiet, expensive consequences that show up six months after the press release runs.
Who runs it
Stefan Efros (CEO) + Daniel Agrici (CSO).
Combined 20+ years of US incident-response across owner-led businesses — healthcare, legal, financial services, manufacturing, professional services. The session is operator-to-operator: no slideware, no compliance theatre, no sales pitch.
Stefan Efros
CEO & Founder, EFROS
10+ years running US incident response across regulated and unregulated SMBs. Stefan walks the timeline, the decisions, and the dollars.
Daniel Agrici
Chief Security Officer, EFROS
10+ years on the technical side of US breach response. Daniel handles the forensics, the why-it-worked questions, and the in-call Q&A on detection and containment.
Logistics
45 minutes live. 15 minutes Q&A. Free.
Format:45 min live walkthrough + 15 min open Q&A. Bring your specific situation — we'll answer it on the call.
Cost: Free. No credit card, no gated PDF, no consulting pitch.
Recording: Available to registrants for 30 days. We don't syndicate or re-broadcast — recording link expires.
Anonymity:Every detail is anonymized. No client names, no identifying facts. The decisions and dollars are real; the identifiers aren't.
Upcoming sessions
We schedule when the list fills.
Register below and we'll email you the moment the next session is scheduled with the calendar invite and dial-in details.
Next session
TBD — register to get notified
We schedule when the registration list crosses 25 owners.
Session +1
TBD — quarterly cadence
Roughly one session per quarter while we scale the format.
Session +2
TBD — open to private bookings
Industry-specific private sessions (Healthcare / Legal / FinServ) available on request.
Register
Save your spot.
We'll email you as soon as the next session is scheduled. Includes calendar invite, dial-in details, and a one-page primer.
Why this isn't a sales pitch
We don't pitch on the call. We answer your questions.
Every webinar you've ever sat through ended with a 10-minute consulting pitch. This one doesn't. The 45 minutes is the walkthrough; the 15 minutes is your questions. That's the whole format.
If after the session you want to talk through your specific situation, the 20-minute booking link is in the confirmation email — separate conversation, separate calendar. We keep them separate on purpose.
We run the webinar because owners who've seen one breach walk through end-to-end make better decisions when their own Tuesday goes wrong. That's good for owners; it's good for EFROS too. The pitch is the format, not a closer.
Want to run the math now?
Two self-serve tools and a 20-minute call — all free. Use whichever matches where you are.