Incident Response Retainer

Incident Response (IR) Retainers provide proactive and reactive capabilities to make sure that you are prepared in the event of a security incident. The retainers include prioritized access to insurance-approved IR experts at a preferred rate, without requiring an upfront pre-purchase of IR hours. Additionally, the Incident360 Retainer options include end-to-end IR coverage for one incident.

IR Retainers provide an IR planning template that allows you to compile the critical information required to quickly respond to any type of cyber incident. All IR Retainer options also include incident-specific runbooks and a cybersecurity assessment tool to help you prepare for cybersecurity events. Incident360 Retainer Plus tiers also include readiness touchpoints with the IR team, such as a tabletop exercise and reviews of your readiness materials. This proactive planning makes sure that an emergency IR team can immediately contain threats and restore business systems during an engagement.

If you have the Incident360 Retainer, you can decide when to use your covered incident. After that incident is used, IR services are charged at an hourly rate.

Note:

Data mining, compromise assessments, and proactive services are not included with the single-incident coverage. Those services require an additional hourly rate.

Each IR Retainer tier has these features:
Note: Managed Service Providers (MSPs) can purchase the JumpStart Retainer for themselves or individually for their customer organizations. This is the only retainer available to MSPs.
Feature JumpStart Retainer Incident360 Retainer Incident360 Retainer Plus
One covered incident during a subscription period
Response time 4 hours 3 hours 3 hours
IR Planner
Incident-specific runbooks
Cyber Resilience Assessment
Threat intelligence reports
Tabletop exercise during a subscription period 1 exercise
Readiness touchpoints during a subscription period
Note: MSPs get one MSP touchpoint. This touchpoint can only be used by the MSP regardless of whether the MSP purchased the retainer for themselves or one of their customers. For more information, see Readiness touchpoints.
2 touchpoints

With any tier, you can also purchase the Rapid Response Add-On. This provides a 1-hour response time and a reduced hourly rate for any additional service requests.