A 24×7 retainer for breach containment, forensic investigation, regulator reporting and recovery.
Engagement
Annual retainer, or emergency engagement
What it is
When something goes wrong, we contain it, investigate what happened and help you report it correctly. After the incident we harden the environment, including asset inventory and bringing legacy assets under SIEM and PAM.
Who it's for
Any organisation that would need expert help within hours of a breach.
The outcome
Faster containment, correct reporting and a stronger environment afterwards.
Step 1
Triage
Confirm the incident and agree immediate actions.
Step 2
Contain
Stop the spread and preserve evidence.
Step 3
Investigate
Find the root cause and the scope of impact.
Step 4
Report
Support notifications to regulators and affected parties.
Step 5
Harden
Close the gaps that allowed the incident.
They vary by market. India's CERT-In Directions require reporting within 6 hours; Malaysia has NACSA and amended PDPA notification duties; Australia has the Notifiable Data Breaches scheme. We help you meet each one.
Yes, subject to availability. A retainer guarantees response times and speeds things up because onboarding is already done.
More from Shield
Vulnerability Assessment & Penetration Testing (VAPT)
Find and prove exploitable weaknesses in your applications, networks and cloud before attackers do.
Red Teaming & Adversary Simulation
Goal-based attack simulation across people, process and technology, with purple-team workshops to tune your detection.
Social Engineering & Phishing Simulation
Phishing, vishing and physical-access tests that show how your people respond, with results fed into training.