Knowledge Base

Find answers to common questions and learn more about our services

Clear

Stress management resources for on-call team

## Overview Severe incidents and noisy on-call rotations destroy sleep and relationships if leaders ignore human limits. Sustainable response capabili...
incident-response-disaster-scenarios msp seed-library
Oct 26, 2024 Read more →

Evidence chain of custody basics for techs

## Overview Chain-of-custody documentation shows that digital and physical evidence was not altered between collection and analysis. Field technicians...
incident-response-disaster-scenarios msp seed-library
Oct 25, 2024 Read more →

Retainer versus T&M for IR engagements

## Overview How incident-response help is priced changes how quickly clients can engage you during chaos. Retainers buy predictable rates and priority...
incident-response-disaster-scenarios msp seed-library
Oct 24, 2024 Read more →

Post-mortem blameless review template

## Overview Blameless post-mortems focus on fixing systems and processes first. They are not consequence-free for repeated negligence, but they should...
incident-response-disaster-scenarios msp seed-library
Oct 23, 2024 Read more →

Insider threat indicators and HR coordination

## Overview Insider-risk programs intersect HR policy, employment law, and security monitoring. Investigations should never be run by IT alone—use a c...
incident-response-disaster-scenarios msp seed-library
Oct 22, 2024 Read more →

Cloud account takeover recovery steps

## Overview Account takeover in Microsoft 365, AWS, or Azure often starts with phishing, MFA fatigue, or token theft from an unmanaged device. Recover...
incident-response-disaster-scenarios msp seed-library
Oct 21, 2024 Read more →

War gaming supply chain compromise

## Overview Supply-chain attacks abuse trust in software updates, RMM platforms, signed binaries, and third-party remote-access paths. War games build...
incident-response-disaster-scenarios msp seed-library
Oct 20, 2024 Read more →

Tabletopping ransomware monthly reminders

## Overview **Tabletops** decay into checkbox fatigue without **drumbeat reminders**—automate **nudges** in PSA + security calendar. ## Reminder cont...
incident-response-disaster-scenarios msp seed-library
Oct 19, 2024 Read more →

Notification to customers regulatory checklist

## Overview **Breach notification** triggers vary by **state**, **sector**, and **contract**. **Counsel drives** timing and content; you supply **tech...
incident-response-disaster-scenarios msp seed-library
Oct 18, 2024 Read more →

Cyber insurance hotline information gathering

## Overview **First insurer call** sets **duty to defend** path—**collect before dialing** when possible; **counsel** often joins. ## Facts to assemb...
incident-response-disaster-scenarios msp seed-library
Oct 17, 2024 Read more →

Vendor SOC coordination expectations

## Overview Your **MDR/SOC** vendor sees part of the picture only. **Expectations** must be contract + runbook-aligned. ## Information they need fast...
incident-response-disaster-scenarios msp seed-library
Oct 16, 2024 Read more →

Password reset at scale after breach

## Overview **Big bang** resets fix lateral movement **or** cause **lockout avalanche** if sequencing sloppy—**IR lead** owns plan. ## Preconditions...
incident-response-disaster-scenarios msp seed-library
Oct 15, 2024 Read more →