This service will help you prepare for any cyber incident based on the frameworks supported by ISO 27035 and CREST.
- Benefit from the expert guidance and support of an experienced cyber security team.
- Receive an accurate estimate of the effort involved in building a CIRM programme, allowing you to focus on securing required budget and senior executive sponsorship.
- Build the necessary capability to make critical decisions about cyber incidents in the shortest timeframe.
- Deploy a robust and practised incident response plan that will ensure you are prepared for any event.
- Develop the necessary response measures that will keep your organisation afloat in the face of disaster.
Download full service description
What will the CIRM service deliver?
The key deliverables of this service are a combination of technology, competencies, processes and procedures based on the following key incident response phases:
-
Planning
Risk assessment and risk management.
-
Preparation
Roles and responsibilities for those involved in the CIRM framework.
-
Detection
Monitoring and detecting – using technology and other procedures.
-
Reporting
Managing incidents – how, when, what and to whom they should be reported.
-
Assessment
Assessing and triaging incidents, including roles, processes and technologies.
-
Decision
Competencies to undertake short-, medium- and long-term decisions to respond to an incident.
-
Response
Containment, eradication, resolution and closure.
-
Lessons learnt
Reviewing CIRM procedures following an incident to highlight improvements.
Download full service description
Eligibility
The CIRM service is a bespoke service suitable for organisations of any size, in any sector or industry.
Why choose IT Governance?
- Our consultants have extensive experience in cyber security solutions, drawing on international standards and frameworks to support your business objectives.
- We are a Crown Commercial Service provider. This service is registered with the G-Cloud and is one of the leading providers of management system consultancy services in the UK.
- Benefit from our additional services at affordable rates, such as penetration testing, ISO 27001 or ISO 22301 compliance projects.
- Our pricing proposals are completely transparent, so you won’t get any surprises.
- Get access to an experienced, dedicated technical team that can carry out sophisticated cyber security incident investigations quickly and effectively.
- Our multi-disciplinary expertise means we can help you tailor your project according to your organisation’s strategic objectives.