Incident Response, Forensics & Resilience
Incident response planning, tabletop exercises, forensics support, recovery planning and post-incident improvement.
How an organization responds in the first hours of an incident shapes the damage that follows.
How an organization responds in the first hours of an incident shapes the damage that follows. Teams need tested plans, access to investigation support and a way to learn from what happened. Which requirements apply depends on your organization, its sector and the rules that govern it.
What the engagement covers
- Incident response planning
- Tabletop exercises
- Investigation and digital forensics support
- Malware analysis coordination
- Recovery planning
- Post-incident improvement
- Incident reporting readiness for the sector and National CERT requirements that apply to you
- Preparation for coordination with sectoral CERTs and the National CERT
Understand. Prioritize. Enable.
How we deliver incident response, forensics & resilience, step by step.
- 01
Plan the response
Roles, escalation paths and playbooks are set out around the incidents you are most likely to face.
- 02
Practice together
Tabletop exercises test decisions and communication before a real event.
- 03
Investigate when needed
Investigation and forensics support, with malware analysis coordinated where required.
- 04
Recover and improve
Recovery planning and a post-incident review turn lessons into lasting improvements.


