Rempart Response. When the day comes, the cell already knows your systems.
Rempart Response is the CSIRT emergency service that mobilises SecuLabs experts in the event of a critical incident.
Incident under way, no contract? CSIRT emergency response
Before, during and after the incident
The Response service is built around preparation beforehand, permanent on-call cover and end-to-end support.
Before · 3 to 5 days
Preparation
A preparation phase of 3 to 5 days documents your environment, your contacts and your access. Response procedures and playbooks are put in place beforehand.
During · Incident day
Immediate activation
An emergency set-up mobilises the experts for critical events at night, at weekends and on public holidays.
After · Back to normal
Coordination & lessons learned
Technical support for remediation, coordination of the teams, steering the return to normal and a lessons-learned debrief.
Experts
A multidisciplinary CSIRT cell you can call on for a critical incident.
Why a preparation phase of several days?
Preparing for a cyber crisis is the most important phase. It gathers the information that will save precious, essential time when the day comes.
- 1
A dedicated tool
Drawing on years of experience, we use a proven framework that reviews several key chapters of your information system and your organisation.
- 2
Every team involved
Each chapter is completed with the team responsible for its scope: IT, business, legal, communications. The aim is to centralise information and processes, which will save precious time on the day of the crisis.
- 3
Annual update
Once the initial preparation is complete, an annual update reviews the changes and refreshes the points of attention.
What Detect covers, what Response adds
Subscribing to Rempart Detect includes a first incident response package: it covers the analysis of and response to P1 and P2 events.
Included in Rempart Detect
First response tier
- Qualification of malicious activity by our analysts
- Notification as soon as an incident is confirmed
- Analysis of and response to P1 and P2 events
With Rempart Response
The cell, prepared and on call
- Preparation phase of 3 to 5 days
- On call nights, weekends and public holidays
- Tailored playbooks & procedures
- Crisis coordination & remediation
A one-off intervention, or a continuous set-up
Response is the subscription form of the CSIRT capability: continuous monitoring and permanent on-call cover. Without a subscription, the same team steps in as an emergency; once the incident is under control, the Digital forensics practice reconstructs what happened.
Keep exploring
Interested in this service?
Let's discuss your specific needs and build a solution suited to your context together.