Solution Brochure

Sophos Incident Response
Services Retainer

Immediate Access to Critical Security Services
With the Sophos Incident Response Services Retainer you have an elite team ofcybersecurity, incident response, digital forensics, and operations experts on standby
to get your organization back to normal operations quickly in the event of a breach.
Preplanned Incident Response ServicesHighlights

Sixty-six percent of organizations were impacted by a significant ransomware event in thepast 12 months with an average recovery cost of $1.82M.1 The only way to save time, reduce
costs, and mitigate the impact of a breach is to have an incident response team in place
before attackers strike.

• Accelerate response time withpre-arranged service terms
and conditions• Incident response experts
on standby to get yourorganization back to normal
operations quickly• Evaluate your current security
posture with a custom
vulnerability assessment• Get the latest insights and bestpractices with monthly threat
intelligence briefings• Improve organizational
readiness with an incident
preparedness guide• Predictable, fixed-fee pricing
means you don’t have to worry
about hidden costs

The Sophos Incident Response Services Retainer is an annual subscription that provides
access to an on-demand team of elite incident response experts that will rapidly deploy into
your environment to disrupt, contain, and fully eliminate active attackers. It also includes
critical incident preparedness resources to improve your organization’s security posture andreduce the likelihood of a breach.
The Sophos Incident Response Services Retainer includes:• Pre-arranged and discounted incident response service rates and conditions• 24/7 access to an elite team of incident response experts• A vulnerability assessment scan of up to 50 IPs/FQDN• A Sophos Central console Health Check and device audit• Monthly threat intelligence briefings• An incident response preparedness guide

Flexible Options and Aligned Incentives
Traditional incident response services and retainers require organizations to purchase“buckets of hours” that determine the maximum time that a service provider will spend
responding to an attack. Reach that time limit, and work stops until a new “bucket of hours”
is purchased. This makes response costs unpredictable, and worse, incentivizes service
providers to charge for more time rather than getting you back to your normal operations
quickly and efficiently.
The Sophos Incident Response Services Retainer provides discounted rates on a fixed-cost,
45-day services engagement that’s priced based on the total number of devices in yourorganization:
Number of devices

Discount on
Sophos Rapid Response

Small

1-200

30%

Medium201-1,999

40%

Large

2,000+50%

Organization Size

Sophos Incident Response Services Retainer Solution Brochure

Rapid Incident Response
If a security breach or incident is confirmed or suspected, the Sophos Incident
Response Services team will identify and eradicate the threat. Incident
response starts within hours, and the majority of customers are triaged within
48 hours. Sophos Incident Response Services are available to both customers
using Sophos products and customers using tools from other security vendors.

Faster Response
Pre-arranged service terms andconditions ensure that no time is wasted
when responding to an active attacker

Includes Incident Preparedness
Resources
A vulnerability assessment report and Health
Check help improve your security posture andreduce the likelihood of a breachDiscounted IR Services Rates

Threat Intelligence Briefings

Discounted pricing on fixed-fee incident
response services means you don’t haveto worry about hidden remediation costs

Monthly threat intelligence briefings deliveredby incident response experts provide the latest
insights and best practices

45 Days of Post-Incident Monitoring andResponse Services
The Sophos Incident Response Services team includes
specialists who neutralize active threats. The moment abreach or incident is resolved, we transfer you to Sophos
MDR Complete, our top-tier MDR service, to provide 24/7
threat hunting, investigation, detection, and response
services for a 45-day period.
Should the same threat — or even a new threat — emerge
during that period, Sophos analysts will respond andeliminate the threat at no additional cost.

Experiencing an Active Attack?
If you are in the middle of an active atttack, call yourregional number below at any time to speak with an
Incident Advisor:
Australia: +61 272084454
Austria: +43 73265575520
Canada: +1 7785897255
France: +33 186539880
Germany: +49 61171186766
Italy: +39 0294752897
Netherlands: +31 162708600
Sweden: +46 858400610
Switzerland: +41 445152286
United Kingdom: +44 1235635329
USA: +1 4087461064
Email: RapidResponse@Sophos.com

Sophos Incident Response Services Retainer Solution Brochure

See why customers choose Sophos for
Threat Detection and Response
Sophos is an established leader in threat detection
and response, with industry recognition to back it up.

Representative Vendor in the Gartner Market Guidefor Managed Detection and Response Services

A Gartner Peer Insights Customers’ Choicefor Managed Detection and Response

Rated the Number 1 MDR solution by customers
in the G2 Winter 2024 Grid Reports

A Leader in the 2024 Frost Radar report for
Global Managed Detection and Response

Exceptional results in the first-ever MITRE Engenuity
ATT&CK Evaluation of Security Service Providers

1 https://www.sophos.com/en-us/content/state-of-ransomware

To learn more, visit
sophos.com/retainer

United Kingdom and Worldwide Sales
Tel: +44 (0)8447 671131
Email: sales@sophos.com

North American Sales
Toll Free: 1-866-866-2802
Email: nasales@sophos.com© Copyright 2024. Sophos Ltd. All rights reserved.
Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UKSophos is the registered trademark of Sophos Ltd. All other product and company names mentioned aretrademarks or registered trademarks of their respective owners.
2024-04-05 SB-EN (NP)Australia and New Zealand Sales
Tel: +61 2 9409 9100
Email: sales@sophos.com.au

Asia Sales
Tel: +65 62244168
Email: salesasia@sophos.com