Cyber Incident Response

Today, no Hong Kong or Macau business is immune from a potential attack. It’s no longer a question of if your business will be attacked. It’s a question of when. Deloitte’s Cyber Incident Response specialists are here to help you before, during and after a cyber incident.

An ever changing threat

The cyber landscape is always changing. Advances in robotics, IoT and artificial intelligence, although positive, can heighten cyber threats for organizations. Cyber threats can’t always be detected by conventional cyber protection methods, and while these conventional methods offer some protection, organizations must develop their cyber response capability to be able to respond quickly and effectively when incidents occur.

What risks are you taking?

If your organization works online, you are at risk. Cyber threats can strike at any time and can impact organizations of any size, based anywhere in the world. The impacts of a cyber attack can be far more costly than the upfront costs of a contingency service such as Cyber Incident Response. Not only are you at risk of financial damage through loss of service or remediation action, you also risk reputational damage.

What can you do to protect your organization?

Deloitte believes preparation and continuous monitoring are the best ways to maintain cyber security. We know that developing and maintaining in-house capability to undertake this task can be too time and resource intensive. That’s where Deloitte can help. Our Cyber Incident Response team works with you to develop processes and strategies to enable you to respond effectively during an incident and exercise these processes using realistic cyber simulations. This capacity, alongside our global network of technical responders, enables you to be confident that when the worst happens, you have the capability and support to deal with the problem effectively and efficiently.

What’s different about Deloitte?

At Deloitte, we understand that no matter how prepared you are, an attack can still happen. Deloitte’s Cyber Incident Response specialists are here to help you before, during, and after, a cyber incident.

As soon as an attack happens, our responders and specialist teams can rapidly deploy into your environment using accredited methodology and state-of-the-art technology to identify what happened, how it occurred, and what’s at risk. Once we’ve established key facts about the attack, our teams work with you to restore your services, protect you from further attack, and get you back to business as usual as quickly as possible.

Our Cyber Incident Response doesn’t end there. Our teams continue to work with you after an attack, helping to implement robust security measures and procedures to enhance your resistance against future attacks.

Cyber Incident Response services

Our Cyber Incident Response service enables access to multiple specialist services to support your organization when you need it most. These services include:

• Incident Management
• Malware Analysis
• Network & Endpoint Analysis
• Cyber Forensics
• Threat Hunting
• Threat Intelligence
• Crisis Management
• Communications Support
• Technology Recovery
• Customer Breach Support

Cyber Incident Response proactive services

Our range of proactive Cyber Incident Response services helps your organization improve its preparedness and ability to respond to major cyber incidents. Our services deliver an orchestrated, proactive approach to managing cyber incidents through bespoke frameworks aligned to our Deloitte methodology.

Our services include:

• Incident Response Retainer to pre-purchase bulk retainer services, enabling you with ready-to-use, year-round, 24/7 emergency cyber incident response support from our expert IR team
• Incident Readiness Assessment to baseline and benchmark your current readiness to respond, identify weakness and recommend improvements
• Plan, Process & Playbook Development to embed bespoke processes into your people, process and technology layers
• Compromise Assessment & Threat Hunting to help you identify hidden compromises systems and detect threats that may have bypassed existing cyber defences and detection controls, and enable remediation of events before they become incidents
• Cyber Simulations & War-gaming exercises to rehearse and test all layers of your response capability