[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:incident-response-retainer":3},{"control":4,"products":25,"stories":57,"lessons":101,"related":126,"compare":127},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.","A pre-agreed contract with an incident response firm, with guaranteed response times, so investigators can start within hours of a serious incident.","In a major incident the first hours decide how much is lost, and NIS2 asks for an early warning to the authorities within 24 hours. Negotiating contracts during an attack wastes that time. A retainer usually also covers preparation such as plan reviews and tabletop exercises.",[11,12,13,14],"What response time is guaranteed, and in which countries and languages?","Can unused hours go to preparation such as tabletop exercises?","Do you meet our cyber insurer's requirements for response firms?","Can you support regulatory reporting under NIS2, DORA and GDPR?","Risk: a slow, uncoordinated response to a major incident increases damage and misses reporting deadlines. Control: incident response retainer with a tested escalation path. Owner: CISO. Measure: time from declaring an incident to responders engaged.",[17,18,19,20],"NIS2 Art. 21(2)(b) and Art. 23: incident handling and reporting","DORA Art. 11 and 17 to 19: response, recovery and incident reporting","CIS Control 17: incident response management","ISO\u002FIEC 27001:2022 A.5.24 to A.5.26: incident management",{"name":22,"slug":23},"Incident Response","incident-response","2026-10-16T12:48:25.961854+00:00",[26,33,41,49],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":23,"product_name":30,"url":31,"description":32},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":34,"vendor_name":35,"vendor_logo":36,"product_slug":37,"product_name":38,"url":39,"description":40},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","mandiant-incident-response","Mandiant Incident Response","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fconsulting\u002Fmandiant-incident-response-services","Incident response services from Mandiant, available on retainer.",{"vendor_slug":42,"vendor_name":43,"vendor_logo":44,"product_slug":45,"product_name":46,"url":47,"description":48},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":53,"product_name":54,"url":55,"description":56},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",{"total":58,"last_days":59,"recent":60},681,185,[61,66,71,76,81,86,91,96],{"slug":62,"title":63,"published_at":64,"brief":65},"microsoft-365-crawls-back-to-life-after-a-24-hour-outage-6b7a92","Microsoft 365 Crawls Back to Life After a 24-Hour Outage","2026-11-13T19:08:57+00:00","Microsoft 365 outage affecting 70+ countries caused by bad network update, not cyberattack.",{"slug":67,"title":68,"published_at":69,"brief":70},"university-of-texas-at-arlington-warns-personal-information-stolen-during-cybera-ff3fa2","University of Texas at Arlington warns personal information stolen during cyberattack","2026-11-13T17:26:00+00:00","University of Texas at Arlington confirms personal information stolen in cyberattack claimed by Qilin ransomware.",{"slug":72,"title":73,"published_at":74,"brief":75},"the-microsoft-outage-is-a-warning-for-the-world-aa3046","The Microsoft Outage Is a Warning for the World","2026-11-13T17:15:54+00:00","Microsoft 365 outage impacts Outlook, Teams, and Copilot globally for a second day.",{"slug":77,"title":78,"published_at":79,"brief":80},"ransomware-attack-on-belarusian-cloud-firm-disrupts-businesses-for-days-9b8698","Ransomware attack on Belarusian cloud firm disrupts businesses for days","2026-11-13T14:28:00+00:00","Belarusian cloud provider ActiveCloud hit by ransomware, disrupting services for days.",{"slug":82,"title":83,"published_at":84,"brief":85},"microsoft-struggles-to-restore-email-and-other-services-in-a-global-outage-d96956","Microsoft Struggles to Restore Email and Other Services in a Global Outage","2026-11-13T13:47:42+00:00","Microsoft's global outage impacts Exchange Online, Outlook, Teams across multiple regions.",{"slug":87,"title":88,"published_at":89,"brief":90},"quantum-systems-drones-back-in-the-air-after-malware-scare-7ac3b3","Quantum Systems drones back in the air after malware scare","2026-11-13T13:14:00+00:00","Quantum Systems drones grounded after malware found in QBase control software update.",{"slug":92,"title":93,"published_at":94,"brief":95},"ncsc-cert-se-veckobrev-v-46-8d4dec","NCSC – CERT-SE veckobrev v.46","2026-11-13T10:00:00+00:00","Swedish cybersecurity agencies issue weekly brief highlighting recent cyberattacks and phishing campaigns.",{"slug":97,"title":98,"published_at":99,"brief":100},"microsoft-365-massive-outage-fixes-fail-as-restored-servers-keep-going-unrespons-873bde","Microsoft 365 Massive Outage – Fixes Fail as Restored Servers Keep Going Unresponsive","2026-11-13T06:52:50+00:00","Microsoft 365 experiences a massive global outage as fixes fail to restore server stability.",[102,106,110,114,118,122],{"slug":103,"title":104,"published_at":105},"microsoft-365-outage-exposes-risks-of-unvalidated-network-changes","Microsoft 365 Outage Exposes Risks of Unvalidated Network Changes","2026-11-13T20:20:57.119+00:00",{"slug":107,"title":108,"published_at":109},"microsoft-365-cascading-failure-exposes-risks-of-hyperscaler-dependency","Microsoft 365 Cascading Failure Exposes Risks of Hyperscaler Dependency","2026-11-13T18:20:58.32+00:00",{"slug":111,"title":112,"published_at":113},"qilin-ransomware-steals-personal-data-from-university-of-texas-at-arlington","Qilin Ransomware Steals Personal Data from University of Texas at Arlington","2026-11-13T18:20:39.241+00:00",{"slug":115,"title":116,"published_at":117},"ransomware-encrypts-cloud-providers-infrastructure-disrupting-customers-for-days","Ransomware Encrypts Cloud Provider's Infrastructure, Disrupting Customers for Days","2026-11-13T15:20:40.884+00:00",{"slug":119,"title":120,"published_at":121},"malware-hidden-in-drone-software-update-grounds-german-military-fleet","Malware Hidden in Drone Software Update Grounds German Military Fleet","2026-11-13T14:20:41.076+00:00",{"slug":123,"title":124,"published_at":125},"faulty-update-triggers-global-microsoft-outage-echoing-crowdstrike-incident","Faulty Update Triggers Global Microsoft Outage, Echoing CrowdStrike Incident","2026-11-13T14:20:22.59+00:00",[],{"crowdstrike\u002Fincident-response":128,"google\u002Fmandiant-incident-response":146,"palo-alto-networks\u002Funit-42-retainer":163,"truesec\u002Ftruesec-incident-response":180},{"hq_country":129,"also_provides":130,"reviews":131,"affected":144,"reported":145},"US",[],[132,135,138,141],{"label":133,"url":134},"SE Labs enterprise endpoint test Apr-Jun 2026: CrowdStrike Falcon","https:\u002F\u002Fselabs.uk\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fsecurity-evaluation-test-report-enterprise-crowdstrike-falcon-2026-07-factsheet.pdf",{"label":136,"url":137},"AV-Comparatives EPR test 2025: CrowdStrike Falcon Enterprise","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2025\u002F09\u002FEPR_CrowdStrike_2025.pdf",{"label":139,"url":140},"Gartner Peer Insights: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcrowdstrike-falcon",{"label":142,"url":143},"PeerSpot: CrowdStrike Falcon user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcrowdstrike-falcon-reviews",4,23,{"hq_country":129,"also_provides":147,"reviews":148,"affected":161,"reported":162},[],[149,152,155,158],{"label":150,"url":151},"Gartner Peer Insights: Google SecOps user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fgoogle-secops",{"label":153,"url":154},"PeerSpot: Mandiant Advantage user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fmandiant-advantage-reviews",{"label":156,"url":157},"CSO Online: Top 10 vendors for AI-enabled security, according to CISOs (2026)","https:\u002F\u002Fwww.csoonline.com\u002Farticle\u002F4115785\u002Ftop-10-vendors-for-ai-enabled-security-according-to-cisos.html",{"label":159,"url":160},"CSO Online: SOAR buyer's guide: 11 security orchestration, automation, and response products (2025)","https:\u002F\u002Fwww.csoonline.com\u002Farticle\u002F3622920\u002Fsoar-buyers-guide-11-security-orchestration-automation-and-response-products-and-how-to-choose.html",155,146,{"hq_country":129,"also_provides":164,"reviews":165,"affected":178,"reported":179},[],[166,169,172,175],{"label":167,"url":168},"AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"label":170,"url":171},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"label":173,"url":174},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",{"label":176,"url":177},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",22,43,{"hq_country":181,"also_provides":182,"reviews":183,"affected":184,"reported":184},"SE",[],[],0]