Frequently asked questions
Clear answers before a confidential discussion.
How Lykos Defence structures validation, readiness, assurance, and digital forensic engagements.
Starting point
Most organisations begin with one question.
Capability Validation is usually the most effective starting point when the answer is uncertain.
Do we have evidence that our incident response capability will hold under realistic pressure?
Frequently asked questions
Before we begin.
Clear answers to the practical questions that shape an engagement.
What does Lykos Defence actually do?
We provide structured Incident Response Capability Validation, Readiness, and Assurance programs.
Our focus is ensuring that your incident response capability works under real conditions, not just in documentation or theory.
How is this different from a traditional incident response retainer?
Traditional retainers are primarily reactive. They provide access to responders when an incident occurs.
Our programs are designed to ensure your capability is continuously validated, improved, and defensible before an incident occurs.
How do we get started?
Most organisations begin with an Incident Response Capability Validation.
This establishes a clear baseline of your current capability, identifies gaps, and provides a structured path forward.
What happens during Capability Validation?
Validation is a fixed-scope engagement designed to test your incident response capability under real conditions.
It examines plans, decision-making, coordination, and technical response to determine whether your organisation is truly prepared.
Do you still respond during a live incident?
Yes.
All programs include defined escalation pathways. Because we are already familiar with your environment, response begins immediately without onboarding delays.
Do you replace our internal team or existing providers?
No.
We work alongside your internal teams and, where applicable, existing providers.
Our role is to validate, strengthen, and ensure your overall incident response capability performs under pressure.
How long do engagements last?
Capability Validation is a fixed-scope engagement.
Readiness and Assurance programs are typically structured as annual engagements with defined cadence and outcomes.
What types of organisations do you work with?
We work with regulated and high-consequence organisations where incident response failure carries operational, regulatory, or reputational risk.
Do you offer standalone services like tabletop exercises or threat hunting?
These activities are incorporated into our programs where required.
They are not delivered as isolated services, as their value comes from how they contribute to validated incident response capability.
How is pricing structured?
Pricing reflects the scope, level of involvement, and structure of each program.
We focus on defined engagements with clear outcomes rather than open-ended or ad hoc services.
How do we know if this is right for us?
If you are unsure whether your incident response capability would hold under real conditions, or if you need defensible assurance for boards, regulators, or insurers, a structured discussion is the best starting point.
Next step
A confidential review of your current position.
A focused discussion to understand your environment, current assurance requirements, and whether our operating model is appropriate.