Why Speed matters with Incident Response?

Speed is crucial in incident response as attackers are increasingly quick to identify and exploit vulnerabilities, and to steal data. In 2023, the median time from compromise to data exfiltration dropped to just two days, down from nine days in 2021. Approximately 45% of data breaches this year saw data exfiltrated within a day of compromise. For non-extortion-related incidents in 2022 and 2023, the median time to data exfiltration has remained under one day, underscoring the need for defenders to respond to ransom attacks in less than 24 hours.

What is an Incident Response Retainer?

The Incident Response Retainer ensures that your organisation is always prepared for a cyber security crisis with pre-paid hours for specialised incident response and recovery services. Designed with your needs in mind, this annual service guarantees a swift 2-hour response time and provides direct access to our team of experts. Whether you need proactive or reactive support, flexible retainer hours can be easily adjusted as your requirements change. Any unused hours can be repurposed for other services. Choose between 20 or 40 annual hours, with the option to purchase additional blocks for added peace of mind.

benefits of Incident Response Retainer


Guaranteed Response Times:

Proactive retainer clients benefit from a guaranteed two-hour response time, reducing the overall impact of security incidents.


Enhanced Coordination:

The onboarding process establishes clear points of contact and ensures a seamless collaboration between CommSec and your team during incidents.


Peace of Mind:

You can sleep soundly knowing that our team are ready to jump into action when a cyber incident occurs. And because we already know your IR Plan and IT estate, we can respond quicker than anyone else.


Proactive and Reactive Service:

Combines proactive measures to strengthen defenses with reactive services to manage and mitigate incidents.


Expert Guidance and Support:

Direct access to specialised cyber security incident response professionals ensures that clients receive the highest level of support during critical times.


Detailed Reporting and Recommendations:

Post-incident reports include an executive summary, activity timeline, findings, and actionable recommendations to prevent future incidents.

Incident Response Features

Choose between 20 hours (Standard Plan) and 40 hours (Premium Plan). You have the flexibility to increase hours by purchasing additional blocks if needed.

Enhanced two-hour response time during a security incident. Ensures rapid action to minimise incident impact.

Assessment and development of an incident response plan tailored to the client’s needs.

An expert assigned to guide engagements during active incidents.

Includes threat investigation, digital forensics, log analysis, malware analysis, attacker containment and recovery.

A dedicated contact to schedule proactive services and ensure full value from the retainer contract.

How the retainer Works

IRR diagram

Incident Response Retainer Service

CommSec’s retainer service enhances clients’ incident response capabilities through a structured and proactive approach. During onboarding, CommSec engages with you to review your current incident response (IR) plan or help you develop one if none exists. This will help us understand your setup, introduce the IR workflow, gather key details such as points of contact and lay the groundwork for effective incident handling. In the event of an incident, the CommSec IR Team will collaborate with your IT security team to collect evidence and execute the plan. We will work with you until the threat is contained, any compromise is eradicated and your systems are recovered.

The retainer provides you with a high level of crisis management readiness and allows us to respond quicker as we maintain up to date knowledge of your plan, your people and your IT estate. This means we are ready to respond effectively to any cyber crisis when called upon.

Download Brochure

get in touch

Contact us.



WHAT HAPPENS NEXT?

A member of our team will get back to you as soon as possible. They will find a suitable time to speak with you, answer any questions you have and help find the perfect solution to suit your requirements.