02 / DURING AN INCIDENT
Incident Response.
Incident Response is IGH’s emergency service. The engagement is called Hack Response; IR Concierge is the coordination layer within it.
AT A GLANCE
What this covers
Who it serves
Any organization with a suspected or confirmed security incident — ransomware, business email compromise, data theft, insider activity, account takeover.
Typical trigger
Encrypted systems, a ransom note, a fraudulent payment, a notification from a bank, partner or authority, or alerts you can’t explain.
The work
- Triage: scope, severity and immediate containment advice
- Hack Response: investigation, containment and eradication led by IGH responders
- Digital forensics to establish what happened and what was accessed
- IR Concierge: coordinating breach counsel, insurer, vendors, executives and communications timelines
Deliverables
- Containment actions log and timeline
- Investigation findings and indicators of compromise
- Scope-of-access summary to support counsel’s notification decisions
- Recovery and hardening recommendations
Not included
- Legal advice or notification decisions (made by your counsel)
- Ransom negotiation or payment unless separately agreed
- Guaranteed outcomes or fixed response times not in your contract
Hack Response = the incident engagement (investigate, contain, recover).
IR Concierge = coordination within Hack Response (counsel, insurer, stakeholders, vendors).
Response commitments are defined in your contract or retainer — IGH does not publish a generic SLA here.
Something happening right now?
Call the 24/7 Incident Response hotline. No login or questionnaire needed.