Incident Response

Cyber Security Incident Response

24/7 incident response and forensic analysis. We contain the attack, find out what happened and help you recover, when every minute counts.

Under Attack Now?

What to Do Right Away

Email info@inca.ie with your name, your organisation, how to reach you and a short description of what you are seeing. While you wait:

Disconnect affected machines from the network rather than switching them off, so evidence held in memory is kept.
Don't wipe, rebuild or restore affected systems until they have been examined.
Write down what you noticed, when, and anything you have already changed.
If you think your email is compromised, contact us from a different account or device.

How We Respond

Contain the attack: isolate affected systems and accounts and stop it spreading.

Collect and preserve evidence so the facts of the incident can be established.

Find out how the attacker got in, what they reached and whether they still have access.

Restore systems safely and close the gaps that let the attack happen.

Reporting Deadlines

Notification deadlines run from when you become aware of an incident, not from when the investigation ends.

GDPR: a personal data breach must be reported to the Data Protection Commission without undue delay and, where feasible, within 72 hours, unless it is unlikely to result in a risk to people's rights and freedoms.
NIS2: essential and important entities must send an early warning of a significant incident within 24 hours, an incident notification within 72 hours, and a final report within a month of that notification.

Be Ready

Practical guide for handling security incidents effectively.

Resources

Spot incidents early with our managed SIEM and Security Operations Center.

Phishing simulations and executive briefings so your people know what to do.

Services

Tell us what you are seeing and how to reach you.