Frequently Asked Questions
We provide structured Incident Response Capability Validation, Readiness, and Assurance programs.
Our focus is ensuring that your incident response capability works under real conditions, not just in documentation or theory.
Traditional retainers are primarily reactive. They provide access to responders when an incident occurs.
Our programs are designed to ensure your capability is continuously validated, improved, and defensible before an incident occurs.
Most organisations begin with an Incident Response Capability Validation.
This establishes a clear baseline of your current capability, identifies gaps, and provides a structured path forward.
Validation is a fixed-scope engagement designed to test your incident response capability under real conditions.
It examines plans, decision-making, coordination, and technical response to determine whether your organisation is truly prepared.
Yes.
All programs include defined escalation pathways. Because we are already familiar with your environment, response begins immediately without onboarding delays.
No.
We work alongside your internal teams and, where applicable, existing providers.
Our role is to validate, strengthen, and ensure your overall incident response capability performs under pressure.
Capability Validation is a fixed-scope engagement.
Readiness and Assurance programs are typically structured as annual engagements with defined cadence and outcomes.
We work with regulated and high-consequence organisations where incident response failure carries operational, regulatory, or reputational risk.
These activities are incorporated into our programs where required.
They are not delivered as isolated services, as their value comes from how they contribute to validated incident response capability.
Pricing reflects the scope, level of involvement, and structure of each program.
We focus on defined engagements with clear outcomes rather than open-ended or ad hoc services.
If you are unsure whether your incident response capability would hold under real conditions, or if you need defensible assurance for boards, regulators, or insurers, a structured discussion is the best starting point.