New guidance for cyber attack victims focuses on the welfare of staff responding to (and affected by) the crisis.