Know what could hold up your response.
If sensitive information were exposed, your team would need to establish the facts and reach the right people. We review your response arrangements and give you clear priorities for improving your readiness.
When it helps
When you want to check that your team could find the facts, reach the right people and make informed decisions.
Where would the facts come from?
An exposure report would raise immediate questions about what happened and which information was involved. The people, records and steps needed to answer them may not be clear.
- Review how the team would gather and record the initial facts.
- Check arrangements for finding and preserving relevant records.
- Identify missing information, access or specialist help that could delay assessment.
The response depends on people being available.
Your team may know who to contact first. It can be less clear who can approve action, who steps in when someone is unavailable and how specialist help would be reached.
- Review the contact, escalation and approval arrangements already in place.
- Check what is known about deputies, provider availability and specialist access.
- Highlight unsupported assumptions and decisions without a clear owner.
People would need answers while facts are still emerging.
Staff, customers or partners may need updates. Your team needs a clear route for checking what is known, approving messages and deciding whether any formal notification is required.
- Review how updates would be prepared, checked and approved.
- Examine how notification questions would reach the appropriate decision makers and advisers.
- Record gaps against confirmed requirements and questions needing specialist advice.
You have a plan, but little time to check it.
Your team may already have strong expertise and sound procedures. Reviewing them across current systems, suppliers and working arrangements still competes with running the business.
- Build on existing plans, previous findings and work already completed.
- Prepare the review and coordinate input from the relevant people.
- Bring the findings together with practical priorities for follow-up.
A clearer view of readiness and what to improve.
We agree the exposure scenarios and information types to cover, then review your existing arrangements with the relevant people. The findings show what is supported by evidence, what remains uncertain and what needs attention first.
Review the arrangements behind your response.
- Preparation using existing plans, relevant records and previous review work.
- Review of how initial facts would be established and relevant records preserved.
- Checks of escalation, decision authority and access to appropriate specialists.
- Review of how updates are approved and notification decisions are made, using requirements confirmed for the engagement.
- Discussions to clarify gaps, prioritize findings and walk through the results.
Clear findings and practical next steps.
- Readiness findings with evidence references, assumptions and unresolved gaps.
- Prioritized recommendations, with follow-up responsibilities and decisions recorded.
- Questions requiring legal or specialist advice, with the available routes for obtaining it.
- A coverage summary showing the scenarios, information types and arrangements reviewed, including what remains untested.
Beyond assessing your preparedness.
Any further work is optional and agreed separately.
- Creating a new response plan, implementing improvements or running a tabletop exercise.
- Investigating an active breach, forensic work, technical recovery or live incident handling.
- Legal determinations of reporting duties or deadlines, certification or compliance assurance.
How it works
We prepare the review, coordinate input and document the findings. Your team helps us understand the arrangements already in place and the decisions that matter to your business.
Agree what to review
We agree the scenarios, information types and response arrangements to cover, along with price and timing. We identify existing work, relevant contacts and the requirements to use for the review.
Examine the response arrangements
We review the available documents and records, then discuss how the team would establish facts, preserve relevant records and reach the people needed to act or decide.
Clarify gaps and assumptions
We follow up on unclear arrangements, including how updates and notification decisions would be handled. We distinguish what the evidence supports from assumptions and questions needing specialist advice.
Set the priorities for improvement
We walk you through the findings, recommended next steps and remaining decisions. Your team receives a record of the review's coverage and agreed responsibilities for follow-up.
Want a clearer view of your readiness?
An informal 30-minute call to discuss your existing response arrangements and see whether a Breach Response Readiness Review is the right fit.