Incident processing

One of the basic processes of any information security management system is incident response. We provide the swift and high-quality service of processing any security policy violations to our customers. It is best to involve us before the incident occurs. We are going to prepare the Customer thoroughly - analyze the possible penetration routes, develop and hone common action procedures, adjust log collection and security event tracking mechanisms. Should the incident occur, we will take the following steps:

• carry out an independent expert assessment of the situation and develop an incident response strategy
• prevent the expansion of the incident's limits
• neutralize the incident's mechanism
• analyze the reasons behind the incident
• carry out forensics, collect evidence and prepare the package of documents required for a criminal case
• help restore the processes damaged by the incident
• give recommendations concerning the prevention of repeated incidents of the type in question
• carry out other activities during the period after the troubleshooting. Timely response allows decreasing the damage resulting from information security incidents significantly. We suggest that you also consider the "Information security management", "Malicious software analysis" and "Security event tracking" service.