When to call
Suspected compromise, ransomware, account takeover, data exposure, malicious access or an incident requiring independent coordination.
Response package
- Initial triage and response priorities
- Evidence and logging requirements
- Containment and recovery coordination
- Incident timeline and cause assessment
- Post-incident report and improvement plan
Engagement model
Urgent requirements begin with triage. Sorinteq agrees responsibilities with internal IT, legal, insurers and specialist suppliers so that evidence, recovery and communication remain aligned.