Legal Protection for Businesses in a Crisis: The First 24 Hours

What Should You Do During the First 24 Hours of a Crisis?

In the first 24 hours following a search, coercion, or an acute corporate conflict, there is only one task— not to harm yourself by acting hastily. Immediately contact a lawyer and security services, remain calm, document your opponents’ every move, do not sign any documents whose contents you do not fully understand, and do not provide any explanations without a lawyer present.

The vulnerability of those first few hours lies in the fact that decisions are made under stress and with limited information. That is precisely why a pre-agreed protocol and a list of experts’ contact information are more valuable than any improvisation. Thorough advance preparation saves hours, each of which is costly.

Search: What to Do During an Investigation

A search is the most common crisis situation a business can face. The main rule for the first few minutes is: do not obstruct lawful actions, but also do not make it easier for those who exceed their authority. You have the right to request the warrant and to wait for your attorney.

What to Do Right Away

• Call your lawyer and the person in charge of security—this is the first call, not the last.
• Ask to see the court order or other supporting document, and record its details.
• Verify that the actions correspond to what is specified in the document: address, list, and group of individuals.
• If possible, record the process on video—under Ukrainian law, this is generally not prohibited.

Things You Should Avoid Doing

• Do not sign any statements or explanations without consulting your attorney.
• Do not delete files, do not "clean out" your email, and do not remove any documents—this could make the situation worse.
• Do not get into a conflict, and do not give testimony “in passing” in the hallway.

Pressure, raider attacks, and scenarios involving the use of force

Coercive pressure rarely begins suddenly—there are usually warning signs. Early diagnosis gives businesses precious time to prepare their legal and security defenses while the situation is still under control.

The following should raise concerns:

• sudden “targeted” inspections conducted simultaneously by several agencies;
• activity related to registration data, shares, and ultimate beneficiaries;
• pressure on key employees or attempts to bribe them;
• Information attacks in the media on the eve of military operations.

In such scenarios, the security team assesses physical and information risks, while a lawyer simultaneously prepares a legal response. One cannot function effectively without the other: the lawyer defends within the legal framework, while the security team addresses the vulnerabilities that made the pressure possible in the first place.

Corporate Conflict: Control Over Assets and Documents

Internal conflicts—whether between partners, with a dismissed top executive, or during an attempt to seize control—are dangerous because the threat comes from within, from people with access. The first 24 hours are critical for maintaining control over information and assets.

Priorities for the first 24 hours:

• document the current status of documents, seals, access rights, and registration data;
• within the bounds of the law and labor law, restrict access for individuals whose loyalty is in question;
• preserve evidence—correspondence, orders, financial documents;
• Agree on a unified position with your attorney before communicating with the opposing party.

Why Lawyers and Security Services Work Together

A lawyer and a security specialist address different aspects of the same threat. A lawyer operates within the legal framework—filing appeals, preparing legal documents, and assisting with investigative proceedings. Security services deal with facts and risks: gathering evidence, vetting individuals, protecting information, and ensuring the physical safety of people.

Together, they provide businesses with a comprehensive picture: what is actually happening, which actions are lawful and which are not, and how to respond without harming themselves. That is precisely why it is more effective to navigate a crisis with a team where legal and security functions are coordinated rather than operating in isolation.

The best time to establish this kind of interaction is — before the crisis, not during it. A pre-agreed protocol, a list of contacts, and a basic vulnerability assessment transform the chaotic first 24 hours into a managed process.