Details.
Emergency support for identifying cyber incidents, defining tactical objectives, containing threats, recovering systems and carrying out tactical clean-up. Follow-up work can include detailed investigation, incident reporting, post-incident review, lessons learnt, control updates, data wiping and response clean-up. Support is consumption based, with a call-out fee and minimum charge. Typical incidents take at least two weeks, and a formal report is typically provided within 10 business days after containment, eradication, service recovery and root cause analysis.