[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:incident-response-retainer":3},{"control":4,"products":25,"stories":57,"lessons":101,"related":126,"compare":127},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.","A pre-agreed contract with an incident response firm, with guaranteed response times, so investigators can start within hours of a serious incident.","In a major incident the first hours decide how much is lost, and NIS2 asks for an early warning to the authorities within 24 hours. Negotiating contracts during an attack wastes that time. A retainer usually also covers preparation such as plan reviews and tabletop exercises.",[11,12,13,14],"What response time is guaranteed, and in which countries and languages?","Can unused hours go to preparation such as tabletop exercises?","Do you meet our cyber insurer's requirements for response firms?","Can you support regulatory reporting under NIS2, DORA and GDPR?","Risk: a slow, uncoordinated response to a major incident increases damage and misses reporting deadlines. Control: incident response retainer with a tested escalation path. Owner: CISO. Measure: time from declaring an incident to responders engaged.",[17,18,19,20],"NIS2 Art. 21(2)(b) and Art. 23: incident handling and reporting","DORA Art. 11 and 17 to 19: response, recovery and incident reporting","CIS Control 17: incident response management","ISO\u002FIEC 27001:2022 A.5.24 to A.5.26: incident management",{"name":22,"slug":23},"Incident Response","incident-response","2026-10-16T12:48:25.961854+00:00",[26,33,41,49],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":23,"product_name":30,"url":31,"description":32},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":34,"vendor_name":35,"vendor_logo":36,"product_slug":37,"product_name":38,"url":39,"description":40},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",{"vendor_slug":42,"vendor_name":43,"vendor_logo":44,"product_slug":45,"product_name":46,"url":47,"description":48},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":53,"product_name":54,"url":55,"description":56},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"total":58,"last_days":59,"recent":60},571,102,[61,66,71,76,81,86,91,96],{"slug":62,"title":63,"published_at":64,"brief":65},"cybersecurity-incident-at-bae-systems-disrupts-us-bankruptcy-court-system-d8260f","Cybersecurity incident at BAE Systems disrupts US bankruptcy court system","2026-10-16T15:12:44+00:00","Cybersecurity incident at BAE Systems disrupts US bankruptcy court system operations.",{"slug":67,"title":68,"published_at":69,"brief":70},"when-your-ransomware-negotiator-works-for-the-other-side-dfbbec","When Your Ransomware Negotiator Works for the Other Side","2026-10-16T14:00:00+00:00","Ransomware negotiator arrested for allegedly working with attackers.",{"slug":72,"title":73,"published_at":74,"brief":75},"bae-systems-security-incident-stalls-notices-from-us-bankruptcy-courts-58cf5a","BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts","2026-10-16T11:46:40+00:00","BAE Systems cyber incident halts US bankruptcy court notices nationwide.",{"slug":77,"title":78,"published_at":79,"brief":80},"uk-legal-aid-agency-hack-scope-widens-after-forensic-review-0721f8","UK Legal Aid Agency Hack Scope Widens After Forensic Review","2026-10-15T14:22:34+00:00","UK Legal Aid Agency hack impacts records dating back to 1978.",{"slug":82,"title":83,"published_at":84,"brief":85},"uk-legal-aid-agency-hackers-stole-records-dating-back-to-1978-cfef32","UK Legal Aid Agency: Hackers stole records dating back to 1978","2026-10-15T08:06:47+00:00","UK Legal Aid Agency confirms hackers stole records dating back to 1978 in April 2025 breach.",{"slug":87,"title":88,"published_at":89,"brief":90},"tfg-london-cyberattack-disrupts-systems-at-hobbs-and-whistles-retailers-92637f","TFG London cyberattack disrupts systems at Hobbs and Whistles retailers","2026-10-13T16:44:18+00:00","TFG London cyberattack disrupts IT systems at Phase Eight, Hobbs, and Whistles.",{"slug":92,"title":93,"published_at":94,"brief":95},"legacy-refrigeration-controllers-exploited-in-ot-attack-on-hundreds-of-french-su-b2931f","Legacy refrigeration controllers exploited in OT attack on hundreds of French supermarkets","2026-10-13T10:31:52+00:00","OT attack on refrigeration systems impacts hundreds of French supermarkets.",{"slug":97,"title":98,"published_at":99,"brief":100},"cyberattack-prompts-ahold-delhaize-to-disconnect-systems-44ed78","Cyberattack Prompts Ahold Delhaize to Disconnect Systems","2026-10-13T09:37:12+00:00","Ahold Delhaize disconnects systems due to a cyberattack, impacting deliveries and online orders.",[102,106,110,114,118,122],{"slug":103,"title":104,"published_at":105},"bae-systems-breach-cripples-us-bankruptcy-court-noticing-system","BAE Systems Breach Cripples US Bankruptcy Court Noticing System","2026-10-16T16:20:16.497+00:00",{"slug":107,"title":108,"published_at":109},"ransomware-negotiator-secretly-worked-for-the-attackers","Ransomware Negotiator Secretly Worked for the Attackers","2026-10-16T15:20:17.253+00:00",{"slug":111,"title":112,"published_at":113},"bae-systems-breach-disrupts-federal-court-infrastructure-via-supply-chain-attack","BAE Systems Breach Disrupts Federal Court Infrastructure via Supply Chain Attack","2026-10-16T08:20:29.888+00:00",{"slug":115,"title":116,"published_at":117},"uk-legal-aid-agency-breach-exposes-47-years-of-sensitive-records","UK Legal Aid Agency Breach Exposes 47 Years of Sensitive Records","2026-10-15T16:20:35.876+00:00",{"slug":119,"title":120,"published_at":121},"tfg-london-cyberattack-hits-multiple-retail-brands-across-shared-it-infrastructure","TFG London Cyberattack Hits Multiple Retail Brands Across Shared IT Infrastructure","2026-10-13T18:21:02.732+00:00",{"slug":123,"title":124,"published_at":125},"legacy-ot-refrigeration-controllers-exploited-across-french-supermarket-chain","Legacy OT Refrigeration Controllers Exploited Across French Supermarket Chain","2026-10-13T14:21:25.902+00:00",[],{"crowdstrike\u002Fincident-response":128,"google\u002Fmandiant-incident-response":146,"palo-alto-networks\u002Funit-42-retainer":163,"truesec\u002Ftruesec-incident-response":180},{"hq_country":129,"also_provides":130,"reviews":131,"affected":144,"reported":145},"US",[],[132,135,138,141],{"label":133,"url":134},"SE Labs enterprise endpoint test Apr-Jun 2026: CrowdStrike Falcon","https:\u002F\u002Fselabs.uk\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fsecurity-evaluation-test-report-enterprise-crowdstrike-falcon-2026-07-factsheet.pdf",{"label":136,"url":137},"AV-Comparatives EPR test 2025: CrowdStrike Falcon Enterprise","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2025\u002F09\u002FEPR_CrowdStrike_2025.pdf",{"label":139,"url":140},"Gartner Peer Insights: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcrowdstrike-falcon",{"label":142,"url":143},"PeerSpot: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcrowdstrike-falcon-reviews",4,15,{"hq_country":129,"also_provides":147,"reviews":148,"affected":161,"reported":162},[],[149,152,155,158],{"label":150,"url":151},"Gartner Peer Insights: Google SecOps user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fgoogle-secops",{"label":153,"url":154},"PeerSpot: Mandiant Advantage user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fmandiant-advantage-reviews",{"label":156,"url":157},"CSO Online: Top 10 vendors for AI-enabled security, according to CISOs (2026)","https:\u002F\u002Fwww.csoonline.com\u002Farticle\u002F4115785\u002Ftop-10-vendors-for-ai-enabled-security-according-to-cisos.html",{"label":159,"url":160},"CSO Online: SOAR buyer's guide: 11 security orchestration, automation, and response products (2025)","https:\u002F\u002Fwww.csoonline.com\u002Farticle\u002F3622920\u002Fsoar-buyers-guide-11-security-orchestration-automation-and-response-products-and-how-to-choose.html",111,80,{"hq_country":129,"also_provides":164,"reviews":165,"affected":178,"reported":179},[],[166,169,172,175],{"label":167,"url":168},"AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"label":170,"url":171},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"label":173,"url":174},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",{"label":176,"url":177},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",9,32,{"hq_country":181,"also_provides":182,"reviews":183,"affected":184,"reported":184},"SE",[],[],0]