TRIAGE
Australia Wide Incident Response Services
Minimise attacker dwell time and get the right support just when you need it
Organisations globally continue to struggle with responding to cybersecurity incidents
of respondents said the time to
resolve an incident has increased
reported the severity
of attacks has increased
Source: TheThird Annual Study on the Cyber Resilient Organization, Ponemon Institute, March 2018
Service Overview
Limit Damage and Safeguard your Organisation
When you are under attack, every second counts, which is why Shearwater’s Incident Response solutions can give you confidence that you will be able to quickly identify, and then react appropriately to a cyber-attack. Shearwater incident response provides assurance when you need it through:
- On-site Assistance
- Incident Classification & Triage
- Incident Prioritisation
- Customisable Report
- Remediation Tracking and Verification
Emergency Incident Response
Call us on 1300 228 872 or submit the form below to request a callback
How it Works
Shearwater Incident Response has a 3 Stage Lifecycle
Identify & Validate
This is an identification and triage phase where we pinpoint the attacks and perform triage to contain and isolate impacted systems. This phase gives security professionals a clear understanding of the scope and nature of a breach and eliminates any uncertainty.
Respond
Once an attack is identified and regardless of the physical location of infected machines, our IR team will immediately work with your team to terminate processes, delete files, or execute background processes to remediate the threat.
Analyse & Report
Our IR team will use a variety of methodologies and tools to collect and store breach data for post-incident investigation. We will also provide an Incident Report which includes the necessary next steps required to miminise the likelihood of recurrence and to advise on post-breach compliance and legislation obligations.
Incident Response Service Tiers
Shearwater offers a variety of incident response service tiers, from emergency incident response to retainer based Incident detection and management services.
Incident Management
Retainer based Always-on
incident response
 Always On |
| Up to 9 Days of Support /Year |
| 3 Incidents / Year |
| End of Incident Reporting |
| BAU Potential Incident / Event Triage |
| Able to be rolled into 5 days of health check services if unused. |
| BAU Toolset and Pre-prepared end point tools |
| – |
| – |
| – |
| – |
| – |
Proactive Incident Management
Incident Monitoring, Detection and
Response Managed Service
| Always On |
| Up to 10 Days of Support /Year |
| Managed Service |
| End of Incident Reporting |
| On Call Triage & Advisory |
| Able to be rolled into 5 days of health check services if unused |
| Pre-prepared end point tools |
| Tool Deployment & Monitoring |
| Incident Preparation |
| Incident Detection |
| Monthly Reporting |
| Office 365 Monitoring & Alerting |
Why Shearwater Incident Response
Benefits to Your Organisation
- Maintain uptime and reduce risk through effective incident response
- Avoid costs associated with hiring and training incident response staff
- Onsite and Offsite assistance available to avoid travel costs and delays
- Reduce incident response times from days to minutes
- Identify how and why an incident occurred
- Get detailed actionable reports to satisfy management, operations and auditors
- Access highly specialised experts as soon as you need them
- Present your executive team with definitive answers after a security incident
Emergency Incident Response
Our Incident Response Team is ready to help
Call us on 1300 228 872 or submit the form below to request a callback