Security risk assessment & incident response planning
A risk register specific to your business, and a plan your team has actually rehearsed.
Most organisations discover their incident response plan does not work during the incident, which is the worst possible time.
What it includes
- Risk register mapped to your actual systems and data, not a generic checklist
- Incident response runbook covering detection, containment, and notification timelines
- Notification obligations under Kenyan and GDPR-aligned requirements
- A rehearsal, so the plan is tested before it is needed
What you receive
- Risk register
- Incident response runbook
- Rehearsal debrief
Built with
- Risk frameworks
- Runbook documentation
This is a good fit if
- +You would not know who to call first if a system were compromised tonight
- +A client or insurer has asked for your incident response plan
- +You process personal data and have notification obligations