Sophos Incident Response (IR) Retainer

Immediate Access to Critical Security Services with the Sophos Incident Response Services Retainer you have an elite team of cybersecurity, incident response, digital forensics, and operations experts on standby to get your organization back to normal operations quickly in the event of a breach.

Features:

• Accelerate response time with pre-arranged service terms and conditions.
• Incident response experts on standby to get your organization back to normal operations quickly on standby to get your organization back to normal operations quickly.
• Evaluate your current security posture with a custom vulnerability assessment posture with a custom vulnerability assessment.
• Get the latest insights and best practices with monthly threat intelligence briefings.
• Improve organizational readiness with an incident preparedness guide.
•  Predictable, fixed-fee pricing means you don’t have to worry about hidden costs means you don’t have to worry about hidden costs.

Benefits:

Flexible Options and Aligned Incentives:

Traditional incident response services and retainers require organizations to purchase.
“Buckets of hours” that determine the maximum time that a service provider will spend. responding to an attack. Reach that time limit, and work stops until a new “bucket of hours” is purchased. This makes response costs unpredictable, and worse, incentivizes. service providers to charge for more time rather than getting you back to your normal operations quickly and efficiently. The Sophos Incident Response Services Retainer provides discounted rates on a fixed cost, 45-day services engagement that’s priced based on the total number of devices in your organization:

Rapid Incident Response:

If a security breach or incident is confirmed or suspected, the Sophos Incident Response Services team will identify and eradicate the threat. Incident response starts within hours, and the majority of customers are triaged within 48 hours. Sophos Incident Response Services are available to both customers using Sophos products and customers using tools from other security vendors.

45 Days of Post-Incident Monitoring and Response Services:

The Sophos Incident Response Services team includes specialists who neutralize active threats. The moment a breach or incident is resolved, we transfer you to Sophos MDR
Complete, our top-tier MDR service, to provide 24/7 threat hunting, investigation, detection, and response services for a 45-day period.

Should the same threat — or even a new threat — emerge during that period, Sophos analysts will respond and eliminate the threat at no additional cost.

Datasheet