Cyber Security Emergency Response

Containment:

Awareness of a security incident is often the tip of the iceberg in terms of the threat itself. There’s often no immediate way of telling how long a threat has been within an organisation or how pervasive it has become. 

Based on this, we lock down systems and devices to contain the risk within your organisation, protecting wider customers and partners from exposure to the threat. We’ll then work to assess the extent of damage, the plan strategies for recovery with business continuity front of mind.   

Remediation: 

With a full understanding of the extent of a threat or incident, we’ll move to executing remediation measures. This is typically multi-phase, with immediate solutions to plug high-risk security gaps, medium-term implementation of measures to increase overall security posture, and longer-term changes to processes and policies to prevent reoccurrence. 

These longer-term measures will typically follow the analysis stage    

Analysis: 

Full investigation of an incident is an important step to preventing reoccurrence.  From creating an incident timeline to tracking the extent of damage, our thorough assessment will establish where the security gap exists that allowed the incident: whether that be technological or human error.  

Findings will tie in to both medium and long-term remediation measures, allowing organisations to build back stronger.