CSIRT

Direct access to cybersecurity expertise. This not only concerns operational expertise, such as containing and mitigating the cybersecurity incident, but also strategic expertise, such as CISO and DPO profiles that guide and manage customers. Our daily experience with such situations allows us to guarantee high-quality handling of incidents.

We distinguish ourselves in terms of expertise, as we handle CSIRT interventions on a weekly base, from either customers or companies who call us and need professional help. Our focus is aimed at cybersecurity, in contrast to a generic service desk, which works more from a business continuity point of view.

In addition, we provide not only reactive, but also proactive services, thanks to the implementation of an early warning honey pot, which triggers an alarm at an early stage when  suspicious activities on the network occur. This way we can analyze and intervene in a timely manner before the hacker can actually cause damage to the customer’s environment.

Spotit started this service a few years ago, because many organizations contacted us when they experienced a security incident. Naturally, we have a much greater chance of success in handling an incident qualitatively when our experts know the customer’s environment thoroughly and can prepare themselves well. That is why we created this retainer service, where we can properly map out the customer’s environment in advance through an assessment, and clear agreements and mutual expectations can be documented.

During the onboarding phase, we will perform a breach readiness check during which we map the customer’s environment and provide concrete advice to optimize certain systems. This way, our experts know the customer’s environment thoroughly and at the same time we maximize the chances of success when a security incident occurs.

We will draw up an incident response plan together with the customer or review the existing plan, so that everyone is prepared when an incident occurs. In addition, we will also put together a team of both spotit professionals and customer stakeholders. Finally, we carry out a breach readiness check in which we map the customer’s current environment and provide concrete advice to optimize it, so that in the event of a security incident everything is optimally arranged, the necessary documents are available, and we limit the damage as much as possible.

You will be referred to a spotit incident responder who immediately evaluates the customer’s situation and maps the impact. This way he can quickly advise concrete actionable items to the customer to anticipate the hacker’s next steps and avoid more damage. At the same time, we put together a multidisciplinary team with both customer and spotit stakeholders. That team will contain the incident, remove the hacker from the network, and restart the environment safely during the recovery phase, so that the customer can further focus on business continuity.