Incident Response & Forensics

Don’t hesitate, call in the experts.

When an organisation experiences a security breach it can be devastating and the longer it carries on, the bigger the impact. Many organisations are simply unprepared for such an incident. Once it has happened, the actions of your IT Team could have severe repercussions on containing the attack, recovery and any subsequent investigation (including any insurance claim).

It’s still surprising how many organisations don’t treat cyber crime in the same way as crime in the physical world. If someone committed a crime against your organisations in the physical world, you would call the emergency services and then contact your insurance company (if a claim was required). Our advice would be to follow the same path for cyber crime. The emergency services will recommend contacting an organisation such as Barrier to provide incident response.

An experienced incident responder will understand the steps required to firstly ensure that the attack has stopped and no further attacks can take place. Once containment is achieved, priority number two is recovery, whilst ensuring an evidence log is maintained, which is vital for service improvement (to prevent repeat attacks), any potential criminal investigation and insurance claim.  They will also help you manage communication both internally with staff and externally with customers and suppliers.

Help is at hand.

Through our partnership with the Scottish Business Resilience Centre (SBRC) and Police Scotland, we have built a reputation as a leading Incident Response organisation.

Our Incident Response consultants are always ready to assist with an emergency. We draw upon years of experience to help you contain and recover from a cyber security incident and resume normal service as quickly as possible. Our incident responders will provide management support to help you make the right business decisions related to response actions.

Once the incident has been contained and your systems are fully recovered, we switch into forensic mode. Our forensic procedures support the collection, preservation and analysis of digital evidence in accordance with your objectives. Our primary objective is to learn everything we can about the incident so that we can improve protective controls, detection and response for the future. If a criminal investigation or insurance claim (or both) is required then we also gather all the required evidence.

If you are being attacked, suspect an attack or have just been through one, get in touch. We can help.