Practice 04 — Expertise
Crisis
response.
Once an incident is declared, recovery comes first. Contain, prove, restore service, document.
Services offered
- 24/7 incident response
- Forensic analysis
- Threat hunting
- Containment and remediation
- Post-mortem report and corrective plan
- Post-attack recovery plan
Approach
Four stages
01
Mobilisation
First call triaged, response unit assembled, dedicated communication channel opened.
02
Containment
Isolating affected systems, cutting compromised access, preserving evidence.
03
Investigation
Attack timeline, entry vector, actual extent of the compromise.
04
Recovery and post-mortem
Controlled return to service, defensible report, prioritised corrective plan.
We can intervene with no prior contract, including on systems we do not operate.