Incident response
Retained response with pre-agreed terms and named contacts, so triage starts in hours. Containment that preserves evidence, and a review that turns the incident into control improvements.
Prepare for an incident- Regions
- Oman · UK · Norway
- Scope
- Written before it is quoted
The problem this solves
Most organisations do not lack security tools. They lack the time, the coverage and the evidence to prove those tools are working. Incident response is built to close that gap with people who do this every day.
What the service covers
Each area below is a defined part of the engagement, with an owner, an output and a date.
Retainer
Pre-agreed terms and contacts so the response starts in hours, not days.
Triage
Rapid scoping to establish what happened, what is affected and what to protect first.
Containment
Actions that stop the spread while preserving evidence.
Investigation
Forensic analysis of how access was gained and what was reached.
Recovery
A sequenced return to service with hardening applied as systems come back.
Lessons learned
A structured review that turns the incident into control improvements.
The response sequence
How the work runs
The same sequence on every engagement, so you know what happens next.
Scope
A scoping call establishes what is in scope, what is explicitly out, and which constraints apply. You get a written scope before any quotation.
Mobilise
Named consultants, access, escalation contacts and a delivery schedule are agreed and recorded.
Deliver
Work is carried out by the consultants you met at scoping, with progress visible rather than reported only at the end.
Report
Findings are peer-reviewed by a second consultant before release, then walked through with your team.
Improve
Remediation support, retesting and a follow-up review so the work produces a measurable change.
What you get out of it
Evidence you can show
Reports written so they can be handed to an auditor, a regulator or a board without translation.
Fewer surprises
Coverage gaps identified explicitly, including the ones outside our scope.
Regional delivery
Consultants based in Oman, the UK and Norway, not flown in for the week.
Before you enquire
How quickly can this start?
Who actually does the work?
How is this priced?
Where to go next
Prepare for an incident
One scoping call with the consultant who would run the work. No obligation, no charge.