When this work helps
Useful when teams have a general security plan but no tested route for privacy questions, affected-person concerns or communication decisions.
Scope and practical outputs
Review the contact chain, initial facts to gather, decision authority, relevant notification questions and a realistic tabletop exercise.
- A contact and escalation map with deputies to confirm.
- A factual incident-record and decision-log template.
- A tabletop debrief with actions, owners and completion checks.
What your team contributes
Involve the people responsible for security, operations, leadership and communications. Confirm technical investigation arrangements and who can make time-sensitive decisions.
An example to discuss
Practise an email attachment sent to the wrong recipient: preserve the facts, contain further disclosure, identify affected information and escalate the assessment.
Agree the boundaries
Readiness work is different from live incident response. This website and its enquiry form are not an emergency channel. Forensics, round-the-clock coverage, notification drafting and representation require confirmed arrangements.
Common questions
Can we use the assessment to report an active incident?
Use your established incident and escalation channels. A general enquiry does not establish urgent-response coverage.
Does an exercise prove the response will always work?
It tests the selected scenario and reveals improvements. Keep contacts and procedures current and repeat exercises when the situation changes.
Discuss the work you need
Agree the service, deliverables, responsibilities and fees before committing to an engagement.
Related reading
This page explains topics to scope and discuss. It does not establish applicability, certify compliance or confirm a paid engagement.
← Services