When this service helps
Your organization has no usable response plan.
The roles of leadership, the IT provider and advisors remain unclear.
You want to prepare the first decisions before an incident.
What you receive
Deliverables
- Incident response plan and table of alerts and responsibilities.
- Five sheets: ransomware, phishing, data leak, compromised account, unauthorized access.
- Decision and communications log, incident register.
- Notification kit and emergency contacts.
Scope covered
- Roles, decisions, communications and emergency contacts.
- Five quick-reference sheets adapted to the selected scenarios.
- Tracking documents and templates to prepare notification information.
How it works
- 01
Identify the players
We identify decision-makers, responders, alternates and contacts.
- 02
Organize the response
We define escalation and communications.
- 03
Adapt the reflexes
We prepare the five sheets and the tracking documents.
- 04
Deliver the plan
We present the framework and the points to exercise later.
Your involvement
Leadership and your IT contact, with the organization chart and emergency contacts.
Service limits
- Emergency response and digital forensics excluded.
- Exercising the plan and legal advice require a separate engagement.
The scope, responsibilities, recipients of the deliverables and confidentiality terms are agreed before data collection. Any change in scope is accepted in writing.
Frequently asked questions
Five quick-reference sheets are planned: ransomware, phishing, data leak, compromised account and unauthorized access. They are adapted to the selected scope.
A table that specifies when to alert the people involved, who decides and who takes over: leadership, IT, the insurer or the advisors concerned.
No. It prepares how the response is organized. Technical intervention remains with your teams or a specialized provider.
Templates and a decision sheet to prepare the information the relevant authorities and individuals may need. Whether and when to send it is reviewed with the appropriate people, depending on the situation.
No. A presentation is planned to explain the plan. A tabletop exercise or a technical test is organized separately.