When you need us: after a breach
After a breach: a plan the regulator, the insurer and the board can each believe.
An incident, a near miss, or a peer's. You want to be believed again by the regulator, the insurer, your customers and your board.
The moment
Something has happened, or nearly happened, or happened next door. The immediate response is done or under way. What is left is the harder question: what do we change, and how do we show that we have?
What changes
A credible plan, in plain English, with an owner, an order and dates that survive contact with the regulator. Not a larger version of the previous programme, and not theatre: a short list of things that make the next incident smaller and the answer to it quicker.
Who does it
A fractional CISO takes the seat and the questions, and security training and awareness (drills that coach, board briefings without the jargon) prepares people for the next one.
We are not an incident response retainer; if you are in the middle of one, tell us and we will say who to call.
