IR
Incident response
Containment, eradication and recovery — on site if it needs to be. The legal clock starts when you notice, not when you call, so the number is answered around the clock and we can be moving before the first meeting ends.
The first six hours decide the cost
Almost every expensive incident was a cheap incident for the first few hours. What makes it expensive is pulling the wrong plug, wiping the evidence you will need for the insurance claim, telling the regulator something you have to correct later, or waiting a day to be sure before acting. ZInfV-1 gives you 24 hours to make an early notification. Deciding what to do in that window is not something to improvise.
What you get
- A number answered at any hour by someone who can act, not by a ticket queue
- Containment that preserves evidence instead of destroying it
- On-site response in Slovenia and the surrounding region
- Help with the regulatory notification, written to be accurate the first time
- A written account afterwards: what happened, how, and what stops it happening again
HOW IT WORKS
From first call to steady state
-
Triage
What is affected, what is still clean, and whether the attacker is still inside. Answered in the first call, not the first week.
-
Contain
Cut the attacker off while keeping the systems and the logs you will need to prove what happened.
-
Eradicate
Persistence removed everywhere it was planted — the second infection is almost always something missed in the first clean-up.
-
Recover
Restore in an order that does not reinfect what you have just cleaned, with monitoring in place before systems go back.
-
Report
For the board, the regulator and the insurer — three audiences, one set of facts.
WHAT THIS ANSWERS
The obligations this covers
This is not a marketing claim. Each of these regimes names the requirement that this service is the answer to, and the page behind it says which clause.
- 96 days left NIS2 / ZInfV-1 Up to €10 M or 2% of turnover
- 453 days left Cyber Resilience Act Up to €15 M or 2.5% of turnover
- In force now GDPR / ZVOP-2 Up to €20 M or 4% of turnover
- Draft in parliament CER The same entities as ZInfV-1
Who this is for. Everyone, in advance. A retainer agreed while nothing is wrong costs a fraction of an emergency engagement, and the paperwork is already signed when you need us.
THE REST OF IT
Delivered by the same team
Start with a conversation, not a quote
Tell us what you run and what you are being asked to prove. We will say what this would involve at your size, and whether you need it at all.