Managed Detection & Response (MDR)
Continuous monitoring and response for organisations that will never staff a 24/7 security operations centre.
Read moreSecurity & Compliance
Incident Response Planning
A response plan your team has rehearsed, including who decides, who speaks, and who to notify.
Overview
The middle of an incident is the worst time to work out who has authority to take systems offline, who talks to customers, and whether the breach is notifiable. Those decisions need to be made while everyone is calm.
We write response plans that are usable under pressure — short, role-based and specific — then run a tabletop exercise so the team has practised, and correct the plan based on where it actually broke.
What you get
Clear decision authority
Named roles with the power to isolate systems, engage external help and approve public statements.
Runbooks for real scenarios
Specific playbooks for ransomware, account compromise, data exposure and third-party breach.
Obligations mapped
Privacy Act notification thresholds, insurer requirements and contractual commitments identified in advance.
Rehearsed under pressure
A tabletop exercise that surfaces the gaps while the stakes are still hypothetical.
How we work
- 01
Assess
Current capability, tooling and any existing plan reviewed against realistic scenarios.
- 02
Write
A concise plan with roles, escalation, communication templates and scenario runbooks.
- 03
Exercise
A facilitated tabletop with the people who would genuinely be involved, including executives.
- 04
Refine
The plan updated from what the exercise exposed, and a review cadence agreed.
Common questions
Who should attend the tabletop?
Technical responders, an executive decision-maker, and whoever handles communications. Exercises that involve only IT miss most of the real friction.
When must we notify the Privacy Commissioner?
When a privacy breach has caused or is likely to cause serious harm, notification is required as soon as practicable. We help you identify the threshold in advance; the legal determination should involve your lawyer.
Do you provide response services too?
We can support technical response and recovery. For incidents with legal or insurance implications, engaging a specialist forensics firm alongside us is usually the right call.
Often paired with
Disaster Recovery & Business Continuity Planning
Recovery you have actually rehearsed, at a cost the business can justify.
Read moreSecurity Audits & Risk Assessments
An independent view of your security position, expressed as risk the board can weigh rather than findings it cannot.
Read moreReady to talk about incident response planning?
We will tell you what we would do, roughly what it costs, and whether it is worth doing yet.