Service 02 · Fixed scope, fixed fee

Incident Readiness Deployment

Organizations usually discover the state of their preparation during an incident. This engagement finds the gaps first, closes them, and proves they are closed.

Format
Assessment and exercise
Exercise
90 minutes, your team
Ends with
Plan in force, gaps closed
Fee basis
Fixed on agreed scope

Why this matters here

It is no longer hypothetical in this region

The Office of the Registrar-General, the Bureau of Standards, Petrojam, the Financial Services Commission and the Jamaica Stock Exchange have all been attacked, and a lender's customer data appeared on the dark web while its clients were still unaware. All publicly reported, all in one small market, all within three years. The pattern is not confined to one country.

The question for most organizations is not whether something will happen. It is whether the response would be improvised.

What organizations find at 2am

The same four things, almost every time

01

The plan is out of date

Written once, never revised, and describing an environment that has since changed.

02

The contact list is two years old

Numbers that no longer work, for people who no longer hold the role.

03

Nobody knows who can disconnect

Containment stalls while people work out who has the authority to take a system offline.

04

The IT contract has no out-of-hours obligation

Discovered at the moment somebody needs to be called, rather than before.

What we do

Five parts

1

Readiness assessment

We establish whether you could actually contain an incident, who authorizes what, whether you would know which records were accessed, how far back your logs go, and who you would call out of hours. Against evidence, not against intentions.

  • Log retention and coverage on the systems that hold client data
  • Containment capability and who holds the authority
  • What your IT contract actually commits to out of hours
  • Contractual and regulatory notification periods
2

Response documentation

A complete response set, deployed and tailored: the plan, playbooks for the scenarios most likely to affect you, evidence-collection procedures, a severity matrix, and the templates for briefing executives, regulators and insurers when there is no time to draft from scratch.

3

Tabletop exercise

Ninety minutes in your boardroom with your own people, walking one realistic scenario end to end. Facilitated, not tested. No blame, no devices, and nobody rescues the scenario with resources you do not have.

It generates its own findings, and those findings are more persuasive than anything we could tell you, because the room discovers them.

4

Training

Incident triage and response courses for the people who would actually respond, with hands-on labs and recorded completion.

5

Verification

We confirm the gaps found in the assessment and the exercise have actually been closed, against the criterion agreed for each.

An honest boundary

This is preparedness, not response

We do not provide out-of-hours incident response. If something happens at 2am on a Sunday you need somebody who can answer, and that is not us.

What we will do is tell you plainly that you need that arrangement, help you put it in place, and confirm in writing that it exists and what it commits to. Most organizations discover they do not have one at the worst possible moment.

Start with the free plan

Take the incident response plan and fill it in

We publish a complete eight-page incident response plan at no charge. Adapt it, get it approved, and you will have closed the first gap yourself. If you want the exercise and the verification behind it, that is what this engagement adds.