Service 04
Incident response & business continuity
When something goes wrong, we help you contain it, recover and learn from it. Before it does, we help you put the playbooks and continuity plans in place that make recovery faster.
What it covers
01
Incident response
Detection and remediation of cyber attacks, with a clear playbook to contain and recover.
02
Threat intelligence
Understanding the threats relevant to your organisation and sector, so defences match the real risk.
03
Disaster recovery & business continuity
Plans and tests that keep you running through cyber incidents and system failures.
How an engagement runs
01
Prepare
We write or review your incident response plan and playbooks, agree who does what, and test them with a tabletop exercise before you need them.
02
Detect & contain
During an incident, we help you work out what happened and what's affected, then limit the damage.
03
Recover
We help remove the attacker's access, restore systems from known-good backups and check they're clean before they go back into use.
04
Review
Afterwards, we write up what happened, how the attacker got in and what to change, so a repeat is less likely and easier to handle.
What you receive
- An incident response plan and playbooks
- Business continuity and disaster recovery plans, tested
- A tabletop exercise with the people who'd be involved
- After an incident, a written review with what to change
Start a conversation
Talk to us about incident response.
A penetration test, a compliance deadline, a system to build. Tell us where you are and we'll come back to you with how we'd approach it.