Incident Management & Forensic Investigation
Even if you have expert staff readily available, you need to have a response plan in place. The Integralis team of security experts has developed sound incident response programs for successful companies worldwide. We work with you to develop effective policies and procedures and train your front line people to detect and respond quickly to incidents.
Our prioritised approach prepares you to handle a security breach by:
- Stopping the attack immediately, whether it comes from internal or external sources
- Containing the damage as quickly and thoroughly as possible, minimising impacts and improving your systems to prevent future breaches
- Performing a thorough forensic investigation, gathering and preserving evidence that will help you determine the extent of the damage, and support any legal or contractual proceedings that may be required
Our flexible, thorough approach includes:
- Complete, independent and objective assessment of your particular circumstances
- Detailed search and analysis of your storage media
- Thorough examination and analysis of your network and associated devices, including servers, desktops, laptops and email systems
- Timeline documentation of critical events to ensure a complete view of an incident investigation in accordance with ACPO guidelines to ensure evidence integrity
- Investigations in accordance with local guidelines such as ACPO in the UK.
Beyond providing a detailed report that addresses incidents from both a technical and management perspective, we can help you restore your network and data, and establish a stronger disaster recovery and continuity solution. Our team members also frequently serve as expert witnesses, and can work with law enforcement on incidents that involve criminal allegations.