Incident Response Retainer

Prevention and Rapid Assistance in Emergencies

IT security incidents happen. The good news is: you can prevent significant damage in the event of an emergency if you prepare properly. That’s exactly where we can help you. If an IT security incident occurs, our Computer Security Incident Response Team (CSIRT) is guaranteed to be there for you, so you can resolve it as quickly as possible.

Get a no-obligation consultation

at your side in an emergency – with guaranteed response times

thanks to joint preparation

through ongoing consulting

The benefits of the Incident Response Retainer

Contingency plans, reporting chains, log data: We lay the groundwork for your incident readiness and discuss the procedure to follow in the event of an emergency. This enables our team to provide efficient support in an emergency – so you can get back up and running quickly.

#CyberVertrauen

Reduce the risk of attack
In a customized onboarding workshop, we identify your potential vulnerabilities. By addressing these, you significantly reduce the attack surface of your IT infrastructure.
Your case takes priority
You can reach our emergency hotline 24/7, 365 days a year. Our CSIRT will call you back within guaranteed response times. If an on-site visit is necessary, we’ll be on our way to you at the agreed-upon departure time.
IT forensics & malware analysis
Our in-depth expertise in digital forensics and malware analysis enables us to reconstruct the incident in detail. We determine how the attackers were able to penetrate and spread—so that it doesn’t happen again.
Fair and transparent pricing
The retainer includes annual included days for incident response services. For additional or extended engagements by our CSIRT, you benefit from a significantly reduced hourly rate.
Continuously improving incident readiness
If no incident occurs, you can convert the included incident response days into consulting services for the following year. The long-term improvement of your incident readiness is what drives us as your reliable partner.

When there’s a fire, the fire department comes to the rescue. But who comes to the rescue when your IT system is under attack? In the long run, companies save money by securing the services of experienced IT professionals to ensure the best possible resilience against IT security incidents. The continuous exchange of information provides a significant time advantage in an emergency and helps minimize damage. The G DATA Incident Response Retainer therefore plays a key role in corporate risk management.
Michael Zimmer, Managing Director of G DATA Advanced Analytics GmbH

Our Incident Response Retainer Plans Tailored to Your Needs

	Gold	Platinum	Diamond
24/7 Hotline, 365 days a year
Maximum CSIRT Response Time	8 h*	4 h	2 h
On-site Support	Subject to availability	Departure within 8 hrs*	Departure within 8 hrs*
Onboarding Workshop	Up to 1 person-day	Up to 3 person-days	Up to 3 person-days
Annual included services provided by our CSIRT	1 person-day	3 person-days	5 person-days
Conversion option for unused included services
Reduction in hourly rate	5 %	11 %	15 %
Special terms for IT security consulting and penetration testing

*For exact specifications, see the contract text

Request a consultation

What happens in an emergency?

After an attack, you often feel helpless: How did the attackers get in? Which systems are infected? What data was compromised? You don’t have to answer these questions on your own. Our experienced CSIRT will help you regain control.

24/7 Emergency Hotline: Collection of key information about the security incident and your company.
First response: Callback from our CSIRT within a guaranteed response time and initial consultation with immediate measures.
IT Forensics: We determine how the attackers were able to gain access and prevent reinfection. Upon request, we document our findings in a manner admissible in court.
Restart: Controlled restart of your systems to resume operations.
Documentation: Detailed final report containing all analysis findings and clear recommendations for action.

Emergency Hotline (24/7)

How well prepared are you for an attack?

Have you addressed potential vulnerabilities to reduce your attack surface?
Do you have contingency plans for the most likely attack scenarios, and have you tested them through an emergency drill?
What are your critical resources and processes? And by when do they need to be restored?
What reporting chains are in place for incident management, and who is authorized to make key decisions?
Have you tested your offline backups and their restoration to identify potential issues?
Is your logging strategy sufficient to enable forensic investigation in an emergency?
Do you know which IT security experts you can call in an emergency who are guaranteed to be available?

If you need help with these questions, our CSIRT will be happy to assist you.

Do you have questions about the G DATA Incident Response Retainer?

We’re here to help—with no obligation.

Get advice now

Customers with CyberVertrauen

Success Stories

On the one hand, G DATA Advanced Analytics is a familiar name and a recognized company in the Ruhr region; on the other hand, the partnership also aligns with our strategy of collaborating with regional partners.
Philipp Sporckmann • Marketing Manager, Autohaus Kruft

Autohaus Kruft

The collaboration was excellent. In particular, the clear communication and the coherent action plan provided a solid foundation in this stressful situation.
Andreas Eckey • Information Security Officer, Westfalen AG

Westfalen AG

Fortunately, G DATA Advanced Analytics employs highly trained IT security specialists. Many of them studied and graduated from the Horst Görtz Institute, so we know their capabilities.
Marcus Klein • Deputy Director, IT.SERVICES, Ruhr University Bochum (RUB)

Ruhr University Bochum (RUB)

In this exceptional situation, the collaboration with the specialists worked very well. We worked closely together and found solutions quickly.
Marcello Ficht • Head of IT, Magnetbau Schramme GmbH & Co KG

Magnetbau Schramme GmbH & Co KG

Thanks to G DATA CyberDefense, we feel very well prepared for an attack. We maintain close communication to keep our emergency plans up to date. After all, IT security is not a one-time process but requires continuous adjustments. The enemy never sleeps.
Klaus-Dieter Poppe • Head of IT Operations, City of Hamm