Cyber Incident Response
Cyber breaches happen quickly and can ruin a business.
With a team of professional Incident Response (IR) specialists on deck, you can rest assured your business is backed with the expertise you need to bounce back from a breach.
Blackpanda uniquely manages post-breach losses by offering retained and on-demand incident response services from multidisciplinary regional responders, addressing the greatest pain points of a cyber security breach.
Incidents We Specialize In
How do we respond to breaches?
The Blackpanda DFIR team is comprised of a skilled set of practitioners who are highly experienced and well-trained in crisis management. The team follows procedures developed by Blackpanda, based on a combination of industry best practices (SANS, NIST, ISO) and the requirements of our specific tools and capabilities.
PREPARE
Contact Blackpanda 24/7 notification center
Submit to Blackpanda the incident data-ingestion form
Continue to monitor incident for developments
IDENTIFY
Acknowledge notification and respond
Determine validity and severity of event
Begin data collection
Conduct preliminary analysis
Define scope and assign roles
Communicate plan of action
Begin containment & remediation
CONTAIN, ERADICATE & RECOVER
Contain/Quarantine the incident
Conduct root cause analysis
Confirm/Deny data exfiltration
Extended remediation
Recover lost data (if possible)
Assist in restoring business operations to normal
Submit initial assessment report
LESSONS LEARNED
Cause of breach
Methodology used
Remediating actions
Recommendations for further improvement of security posture
Incident Response Deliverables
Interim Report
Where necessary for schedules as required.
Executive Briefings
Our specialists can create C-Suite level briefings covering all aspects of the incident and detailing critical next steps.
Third Party Regulator Communication
Communication with third party regulators where necessary.
Final Report
Includes Root Cause Analysis, Post-breach reommendations, and more.
Local Responders
Blackpanda deploys highly trained teams of cyber security incident response specialists throughout APAC, with the local linguistic and cultural understanding necessary to manage a crisis. We are able to activate both remote and on-site responders for fast and efficient boots on the ground.
Hyper-Specialization
Our focus is an inch wide and ten miles deep, exclusively in the niche of cyber security digital forensics and incident response. Our responders bring specialized experience and regularly train on a range of incidents including ransomware and negotiation, maritime response, and operational technology.
Military Precision
Our team consists of an elite cadre of cyber risk and security experts from military special forces, intelligence, forensics, and law enforcement backgrounds. Our military origins drive our culture of efficient operational processes, precise delivery of high-quality service, and consistent responsiveness — we bring our lessons from the battlefield directly to the board room.
Trusted by the best to defend against and respond to cyber crises.
