Incident assessment
An initial view of what is known, what remains uncertain, and where to investigate.
← SERVICES / INCIDENT RESPONSEMake the next
Make the next
step clear.
Bring structure to investigation, containment, and recovery when something looks wrong.
01 / THE SCOPE
What you get.
For a suspected compromise or preparation before one happens. Active incident support depends on availability and an agreed engagement.
Response plan
Prioritised containment and recovery actions with clear responsibilities.
Lessons and actions
A record of findings and improvements to reduce repeat issues.
02 / THE PROCESS
A focused engagement.
- 01
Establish the facts
Confirm the situation, affected systems, available evidence, and key contacts.
- 02
Coordinate the response
Investigate and agree containment actions with your team.
- 03
Support recovery
Review restoration priorities and record follow-up improvements.
03 / GOOD TO KNOW
Before we start.
What access will you need?
We agree access to relevant logs, affected systems, and response contacts based on the incident. Evidence handling and permissions are defined before collection or investigation.
Could containment interrupt operations?
Isolating a system or restricting an account can affect operations. We discuss the tradeoffs and obtain the agreed approval before taking containment actions.
What happens after recovery?
The engagement can include an incident summary, remaining uncertainties, and prioritised improvements. Follow-up validation and longer-term support are defined in the scope.
Is this an emergency response channel?
This website does not provide a guaranteed emergency response. For an active incident, use your organisation’s established incident process and response contacts.
What should we include in an enquiry?
Share a brief description, when the issue was noticed, and the type of systems involved. Do not send passwords, sensitive logs, or personal data through the website.
Can we prepare before an incident?
Yes. A scoped readiness exercise can review your response plan, escalation contacts, decision-making, and recovery dependencies.
Start with a conversation.
Tell us about your systems and what you need.