Fixed-fee project
Incident Readiness: Incident response plan and tabletop exercises
Who decides what in the first two hours of a cyber incident. A two-page plan, a call list, and two practice runs with your team.
The worst time to decide who is in charge is during the incident. This project settles it ahead of time. You’ll know who makes the call, who talks to the insurer, who calls the bank, and who talks to customers.
We write a plan short enough to use under stress. Then we practice it with your team by talking through a realistic attack, before you ever need it.
What you get
- A two-page incident plan
- A call list with names and numbers
- Two practice runs (tabletop exercises), one for ransomware and one for email fraud
- Notes and fixes from each practice run
Questions
Do you respond to incidents at 2 a.m.?
No. Before your first practice run, we help you choose an incident response firm, so the call at 2 a.m. goes to people who do that work every night.