Turkish ransomware victims must navigate KVKK notification (72h), MASAK reporting and law enforcement coordination.
First 72 Hours
KVKK notification, USOM report, isolation.
Investigation
Forensic imaging, chain of custody.
Insurance
Cyber policy claim with war exclusion checks.