Managed Security Services
Incident Response
A rapid response team to investigate, contain, and remediate compromised assets.
Use Cases for Incident Response Service
Choosing an incident response provider is kind of like choosing an insurance policy: It's only proven in the heat of a bad situation, so some effort should be made at the outset of the relationship to determine exactly what's going to happen during an IR event.
1 What should an IR team provide after an incident?
Transparency in the interest of learning and preventing future compromise is a critical element of an IR program. All steps should lead toward a more mature security posture, and any successful attacks should be a learning experience for everyone involved. In the wake of an incident, an IR team should provide the following documentation to help glean any useful knowledge from the event:
- Incident Declaration Report
- Initial Assessment of Incident
- Daily / Weekly (as applicable) Status Reports of the investigation
Learn more about what Novacoast provides in our Incident Response Program.