Service Overview & Methodology
24/7 support is provided to ensure effective containment, remediation, and recovery during a breach. The service is designed to reduce response time and minimize business operational impact. Activities include forensic evidence collection, threat hunting, and reporting on the scope of damage.
Deliverables
Upon completion and incident closure, CYE provides a detailed incident summary report including:
Executive summary
Investigation findings (methodology, investigation process summary - containment approach, IOC gathering, forensic analysis methodology, etc.)
Root causes, findings, and proposed remediations
Prerequisites
Completion of an incident readiness questionnaire
Customer Engagement
The client must support the following:
Incident readiness workshop
Full engagement and assistance during an incident
Relevant Standards
NIST Cybersecurity Framework
Security Domains Covered
Cross organization policies, procedures and governance
Security operations, monitoring and incident response