Incident Response Retainer Services
During a cybersecurity incident, time is of the essence. How fast you can effectively respond will have a major impact on your organization.
IR Retainer Overview
When it comes to being hit with a cyber incident, any opportunity to reduce your investigative timelines for understanding the scope of an incident will help reduce your organization’s exposure to the threat, associated risks and subsequent costs.
By having an existing incident response retainer in place with pre-approved terms, conditions and hours, you are assured of having a team of experts in place on-demand.
On-Demand Team of Incident Responders
Our team of incident responders are readily available to address escalations for potential security incidents, assist with investigative analysis and conduct forensic investigations involving the potential compromise of sensitive data or critical information assets.
Access to these pre-paid retainer hours ensures the availability of these resources within the predefined time limits. This can help you identify root cause, incident scope or other activities related to potential threats while reducing investigative timelines.
Key Benefits of an IR Retainer
- Ensures availability of IR experts and assistance within defined SLAs
- No prerequisite capabilities or technology required
- On-boarding process to build familiarity with your environment, technologies and capabilities, to expedite investigative timelines upon escalation
- Resources available for urgent escalations, as well as general DFIR expertise and surge assistance
- Capabilities with on-prem, cloud and hosted solutions
- Pre-negotiated terms and conditions to reduce execution timelines
- Locked hourly rate for any supplemental IR services during the annual services term
- Multi-year options available
- Individual resumes for DFIR specialists available upon request
Core Competencies of our DFIR Specialists
Our team of highly-certified Digital Forensics and Incident Response (DFIR) experts has both breadth and depth of capabilities including:
- Network traffic analysis
- Log collection and review
- Host forensic analysis
- Malware analysis and reverse engineering
- Forensic disk imaging, memory acquisition and review
- Email search and correlation
- Remediation recommendations
IR Escalation, Service Level Agreements & Other Ways to Use Retainer Hours
24x7x365 IR Hotline for Escalation Support: Dedicated hotline for GuidePoint Security IR retainer customers.
Service Level Agreements: DFIR specialists will be accessible to assist within the below timelines, not to be exceeded:
- Four (4) hours for initial response to escalation and direct phone support.
- Eight (8) hours for remote investigative support and analysis.
- Forty-eight (48) hours for on-site investigative support and analysis.
Unused Retainer Hours: Convert to other security services at standard rates, including:
- IR Plan Development
- Playbook/Runbook Creation
- IR Tabletop Exercises
- Penetration Testing
- AppSec Services
- Cloud Services
- GRC Services
Certifications
Put an ELITE Highly-Trained Team on Your Side
SANS GIAC-Cyber Guardian
CISSP
GCFA
GCFE
GSE
GCIH
GREM
GCIA