On-call support for breach response and Section 8(6) notification, agreed in advance — plus periodic tabletop simulations that keep the playbook genuinely tested, not just filed away after the Breach Readiness Assessment that likely built it.
Availability for real incidents and scheduled simulations that keep the same playbook current between them.
Agreed availability to support your team the moment a potential breach is identified.
Hands-on help meeting the Act's breach notification timelines and content requirements when it counts.
Scheduled exercises that re-test the playbook against realistic scenarios, so it doesn't go stale between real incidents.
Updating the incident-response playbook as systems, vendors, or team structure change.
A structured debrief after any real incident, feeding lessons back into the playbook.
The commitments and the playbook are set in advance, so nothing gets negotiated mid-incident.
Simulations and on-call availability both run for the length of the retainer, with each event feeding back into the playbook.
Establish or confirm the current incident-response playbook and agree response-time commitments.
If a playbook already exists — from a prior Breach Readiness Assessment or otherwise — this stage confirms it before the retainer runs on it.
Run periodic exercises against realistic scenarios to test the playbook.
Frequency is agreed in advance, so testing happens on a schedule rather than only after something goes wrong.
Remain on call for real incidents throughout the retainer period.
Includes direct support drafting and sending Section 8(6) notifications if a real incident occurs.
After each simulation or real incident, update the playbook with what was learned.
Feeds straight back into stage two — the same playbook keeps getting re-tested and revised for as long as the retainer runs.
Start with a scoping call — 30 minutes, no obligation.
Book a Consultation