In a typical security incident, most organizations waste precious time trying to locate a firm that has the experience, expertise and available resources to assist with containing and remediating your security incident. Even if you do get lucky and find such a firm, you’ll waste even more valuable time bringing the new firm up to speed on your environment. Meanwhile the bad actors are getting deeper and deeper into your organization either extracting the crown jewels or laying the groundwork for future attacks.
With TBG’s Incident Response Retainer your organization will be better prepared to deal with any security incident in the timeliest manner possible with the greatest chance of success.
Our Incident Response Retainer Program assumes you have an Incident Response Plan in place. If you find yourself without an IRP, don’t fret, we’ll be happy to create your Incident Response Plan. Our Incident Response Plan Creation Services can be found here.
Preparation – TBG works closely with your team to gain a thorough understanding of the environment. We will work with key stakeholders in the process to fully verse our team in the technologies in place, along with the processes that exist for handling incidents when they occur coupled with an understanding of how escalation occurs and who the players are and what their roles are. During this engagement TBG will work closely with your team to build incident response plan, and run books that are focused on forensic data collection and chain of custody. Once these have been prepared a TBG associate will work with your organization to define an SLA, negotiate rates for response and close out all the necessary contractual arrangements.
Notification – In the event of a cyber incident, you will make a request for assistance by either email, our support portal or phone.
Analysis & Leadership – TBG can be called on during an active incident as a subject matter expert to help guide and advise the IR team during containment, eradication and recovery. TBG is you trusted partner during an incident and will be there to help lead your team thru the incident as needed.
Forensic Activity – TBG is ready and able to aid in forensic investigations as deemed necessary. The operational run books we put in place during the Preparation phase will guide the IR customer through the process of proper evidence collection, and chain of custody procedures. TBG will then take forensic materials off site to our lab for analysis and reporting.
With our Incident Response plan, unlike other providers, you don’t pay to have us sit on the bench and wait for an event to happen. On a quarterly basis we provide the following services.
Here are just some of our Certifications:
