Incident Response

Security breaches often result in the exposure of sensitive information, which also leads to loss of service and revenue.  In fact, recent estimates place the number of records containing personally identifiable information (PII), which have been stolen in the U.S. over the past few years, at 900,000,000.  The impacts dealt to organizations involved in these breaches are staggering, including massive fines, loss of jobs, and erosion of public trust.   The best way to mitigate losses in the event of any security incident is to have a previously established and rock-solid plan for incident response.

"After having worked with Patrick and his team, I highly recommend Critical Path Security! Very impressed with their personalized service and effectiveness as a team."

― President, Educational Organization, Phoenix, AZ

Critical Path Security’s Incident Response service helps companies quickly investigate and remediate attacks.  Our solution follows the six steps recommended by the SANS Institute: preparation, identification, containment, eradication, recovery, and lessons learned. This level of planning ensures a detailed and thorough plan of action to fall back on, given any unexpected security incident.

Critical Path Security will develop a program to identify and describe the roles and responsibilities of the incident response team members who are testing the plan and putting it into action, should the need arise.  The plan will specify the tools, technologies, and physical resources, where possible, that must be in place to recover breached information or from a network outage.

Highlights

• Our team helps companies properly respond to incidents at a moment’s notice
• Detect and determine if a deviation from normal business operations is an incident and, if so, determine its scope
• Limit the damage and prevent any further damage from happening
• Removal and restoration of affected systems
• Carefully restore affected systems back into production environments
• Thorough incident documentation, including the creation of additional documentation that may be beneficial for future incidents

Why Incident Response?

• Reduce dwell time: outlining how to minimize the duration of a security breach
• Hastening recovery time: proven process helps shorten remediation timelines
• Reduce negative publicity: proper incident response protocols help minimize the potential damage around brand image and customer loyalty.
• Retain executive confidence: increasing the confidence of corporate executives, owners and shareholders.