Business Incident Response

A business incident has a second problem a household's does not: other people are affected, and some of them are entitled to know. The customer whose invoice was diverted, the insurer who wants a timeline, possibly a regulator. What you can say to them depends on what you can establish, and that depends on what is preserved in the first hours.

We contain first — cut the access, stop it spreading — then establish what was actually reached, which is usually less than feared and occasionally more. You get a written timeline of what happened and what was done, which is the document every subsequent conversation will be built on.

The initial response covers four hours, which resolves most single-account incidents. If yours is larger, you will be told what remains and what it would cost before any of it is done.

Prices reflect the time these engagements normally take. Where a service is priced by size, pick the tier matching whichever part of the description is larger for you — a small house with a great many devices belongs in the higher tier. If what we find on the day goes beyond the tier you picked, we will tell you before starting and agree any additional time with you first. We never bill for extra time you have not agreed to.

How it works

1. Contain

   Establish what is compromised and shut the access, in an order that preserves what you may later need to show.

2. Establish scope

   What was accessed, what was taken, and what was done with it — as far as the evidence allows, stated honestly where it does not.

3. Recover and document

   Accounts recovered, devices cleaned or rebuilt, and a written timeline suitable for an insurer, a customer or a board.

Often added to this

When we confirm the details by email, mention any of these — or we will suggest one if it fits — and it goes on the same invoice as the main work.

• Follow-up check

  $150

  A remote session a month or two later to confirm what was set up is still in place, updates are landing, and nothing new has crept in.

• Staff briefing

  $225

  Thirty to forty-five minutes with your people at the end of a visit: what changed, what they need to do differently, and the scams aimed at businesses like yours.

The full list of add-ons