Incident response & cyber recovery
Incident response & cyber recovery should be positioned in Tunisia as a response to the following problem: the customer lacks a clear capability to investigate, contain and restore after an incident. The offer targets the following outcome: an IR/recovery package, procedures, investigation capability and a remediation plan. In this market, the main emphasis is pragmatism, controlled costs, local delivery and RFC's local references; the packaging must therefore remain short, concrete and backed by local references.
- HERO offer
- Security & Resilience
Identify priority risks, posture gaps and security actions to launch.
Prepare recovery after an attack
The customer lacks a clear capability to investigate, contain and restore after an incident.
Pain points
The customer lacks a clear capability to investigate, contain and restore after an incident.
Promise
Give the customer a concrete path towards this outcome: an IR/recovery package, procedures, investigation capability and a remediation plan. The commercial commitment must demonstrate that RFC can quickly deliver initial demonstrable value, with a short engagement scope, limited presales effort and an available RFC reference.
Outcome
An IR/recovery package, procedures, investigation capability and a remediation plan.
Recommended entry service
A short assessment to objectively map the situation, identify the major gaps and prepare a prioritised action plan.
Essential services
These services form the offer's foundation and contribute to the expected deliverables within the agreed scope.
Incident Response Retainer
Availability agreement for cyber incident assistance, including scoping, escalation, investigation, coordination and lessons learned.
Cyber Incident Investigation & Remediation Pack
Post-incident response package: investigation, attack vector identification, executive report, remediation plan and initial hardening. Includes post-ransomware remediation: stabilisation after an attack, restoration, securing and hardening systems, incident report and prevention plan.
Services to go further
Activate complementary services according to priorities, constraints and capabilities already in place.
Cyber Resilience Program
Foundational programme combining cyber posture, backup, continuity, incident response, governance and resilience management.
Cyber Recovery & Backup Assurance
Offer to secure actual restoration capability: cyber requirements, immutability, recovery tests, RTO/RPO, restoration evidence and recommendations.
Backup Recovery Assurance
Recurring restoration capability verification service: tests, restoration evidence, reporting, alerts and improvement plan.
Talk to an RFC expert
Describe your priorities, constraints and projects to prepare a discussion with the relevant teams.
Technology stack
Protection, detection and recovery technologies selected according to risks and the chosen scope.
Investigation and recovery
Investigate, remediate and organise recovery after an incident.
(Step 01)
Qualify and coordinate the response
Establish the available facts, the priorities and the intervention responsibilities.
Deliverable
Qualification sheet and intervention plan.
Organisations supported in their transformation
Find the organisations associated with the engagements presented, along with their industries and individual contexts.
Projects to inform your choices
Explore related engagements to understand the contexts, scopes and challenges covered by RFC.
- Client Reference
2023 - Industry
Secure network after a ransomware attack
Fondinor
Deployment of secure network infrastructure following ransomware.
Tracked Indicators
Secured equipment • network availability
Explore the domain's other capabilities
Find complementary offers and areas of expertise to extend your approach according to your organisation's needs.
- See details...Security & Resilience
M365 Zero Trust baseline
M365 Zero Trust baseline should be positioned in Tunisia as a response to the following problem: the security posture is exposed by insufficiently hardened identities, access and M365 environments. The offer targets the following outcome: a prioritised security baseline, remediation and a pragmatic Zero Trust roadmap. In this market, the main emphasis is pragmatism, controlled costs, local delivery and RFC’s local references; the packaging must therefore remain short, concrete and backed by local references.
Talk to an RFC expert
Share your context, priorities and constraints. Our experts help you structure an IT journey aligned with your transformation goals.
Tell us about your challenges
Share your priorities to prepare for a focused discussion.