Incident response.
When something goes wrong, speed and a clear head matter most. We contain the problem, work out what happened, get you running again and help you close the gap.
What’s included.
Contain
- Compromised accounts locked and sessions revoked
- Affected devices isolated from the network
- Malicious mail rules and forwarding removed
- Passwords and keys rotated
Investigate and recover
- Timeline of what happened and what was reached
- Systems rebuilt or restored from clean backups
- Checks for anything left behind before going back online
- Evidence preserved for insurers and authorities
Afterwards
- Plain-language incident report
- Help working out who needs to be told
- Fixes for the gap that was used
- A response plan for next time
How it works.
-
Contain
We stop the spread first: accounts, devices and access.
-
Investigate
We establish what happened, when, and what data was involved.
-
Recover
Systems are cleaned, restored and checked before they go back into use.
-
Harden
We fix the cause and write down what to do differently.
Further reading
- lesson Beginner 3 min read What is a DDoS attack? A DDoS attack floods a website or online service from many devices at once until real users cannot get through. How it works and how to prepare.
- lesson Intermediate 3 min read How ransomware attacks work The three stages of a ransomware attack, how attackers get in, why they go after backups, and what to put in place before it happens.
- lesson Beginner 2 min read How to spot a phishing email Six checks that catch most fake emails, and what to do in the first few minutes if you have already clicked.
Related
- Threat Detection and Monitoring A round-the-clock watch on sign-ins, devices and networks, with alerts someone acts on.
- Data Management Backup for Microsoft 365, cloud, servers and laptops, disaster recovery, and restores that are tested.
- Security Awareness Practical training and phishing simulations that teach staff to spot the trick.
Tell us what needs sorting.
Book a call or send an email. We reply within one business day.