Cyber Incident
Response

Enlist elite responders to handle
the entire security incident lifecycle

Cyber Incident Response

Enabling Diligent, Seamless Response
Worldwide
Kroll’s Cyber Risk experts manage over 2,500 security
investigations every year. We respond to incidents of all types,
complexity and severity for organizations across diverse
jurisdictions and industries.
You can count on Kroll’s unique frontline experience not only in a crisis, butalso for proactive planning and mitigation strategies. We are among the top
service providers preferred by major cyber insurance companies and offer
client-friendly incident response retainers for peace of mind.

FASTER RESPONSE THROUGH ADVANCED REMOTE AND ONSITE CAPABILITIESOur global network of certified security and digital forensic experts can deploy remote solutions quickly and/or prepare to be
onsite within hours. We can help augment your internal team to identify root cause, contain and remediate the situation, thendetermine next steps to strengthen defenses, policies, and procedures.

C O NT RACT S

I N S U R A N CE

D FI RI NTE LLIG E NCE

N OT I F I CAT I O N

R E M E D IATI ON

Unified MSA

Approved vendor

Elite responders

Extensive sources

Compliance focus

Broad protection

Single agreement
for IR and Breach
Notification, globally• Extensive
relationship withover 45 cyber
insurance carriers.

• Forensic 4:cast
Digital Forensic
Investigator of thelast four years ina row• Proprietary dark
web index: 14+years, 2.5 PB• Legal and regulatory
experience in DFIRand Notification
teams• Extensive monitoring
capabilities
supported by skilled
investigators andconsultants• Dedicated team toinsurance and legalpartners, exclusive
benefits to insureds• 170+ IR experts
worldwide, familiar
w/ legal holds,
forensic evidence
for litigation• AI-fueled threat
intel analysis via
CyberDetectER
DarkWeb• NCFTA, NJCCIC,
law enforcement
relationships• Crisis comms
experience• Infinitely scalable –handled over 300M
records worldwide• Multi-lingual
consultative callcenter capabilities• Proprietary DFIR
and eDiscovery
tools

Kroll2

Cyber Incident Response

PARTNERS BEFORE AND THROUGH AN INCIDENT
Services can be part of a flexible retainer

Benefit from Client-FriendlyIncident Response Retainers• Prompt access toBEFORE

THROUGHelite team of incident
response and breach

Cyber security program
development, including
Virtual CISO and Data
Protection Officer (DPO)
advisory
Compromise andvulnerability assessments,
penetration testing

Customized incident
response tabletop exercises
and training workshops

Data recovery, threat
identification, forensic
analysis and containment

notification experts
worldwide• Rapid response SLAs
to provide peace ofmind in the event of an

Close coordination
with legal, insurance,compliance, business andrisk management teamsIdentification of PII, PHI andother protected information

emergency• Robust preparedness
services, including• Ransomware

Data collection andpreservation, support forlitigation and eDiscovery

Wire Fraud• Point-of-sale andpaywment card
processing compromise(PCI/PFI)

Vendor and supply chain
risk management

Customized notifications to
impacted population, withworldwide coverage• Web Application
Attacks and CredentialTheft• Advanced PersistentThreat hunting andmanaged detection andresponse

Security program
improvement, from network
hardening to security
culture training for staffand simulations• Flexibility to repurpose
unused hours towarda variety of proactiveservices• No minimum hourly
usage requirements orlead times• Rate discounts for otherhourly Kroll services

Common Threats Addressed by
Our Incident Response Team• Email Compromise andClose coordination
with legal, insurance,compliance, business andrisk management teams

tabletops, policy reviews

Threats (APT) and• Insider Threats andRogue Employees• Third Party and VendorRelated Risks• Supply Chain Attacks• Malware, Keyloggersand Backdoors• Cryptocurrency Theft• Intellectual PropertyTheft• Banking Trojans

State-sponsoredAttacks

FORTIFY YOUR RESPONSE WITHA DIVERSIFIED APPROACHThreats are growing in volume and sophistication
and are coming from multiple directions. Leverage
Visit the Cyber Risk blog for the latest case studies:kroll.com/cyberblog

the frontline experience of Kroll’s global incident
response and investigations team for strategies asmultifaceted as the threats you face. Speak with
one of our specialists to learn how you can reduce
your exposure to cyber risk by strengthening yourincident response capabilities today.

Kroll3

Many of our cyber• Federal Bureau of Investigation (FBI)professionals bring years• Interpolof unique experience from• U.S. Department of Justice (DOJ)

their former service withlarge enterprises as well

• Securities & Exchange Commission (SEC)

as law enforcement and• U.K. Intelligence and Policing

regulatory agencies:• U.S. Department of Homeland Security

CREST has accredited Kroll
as a global Penetration
Testing provider(DHS)• U.S. Secret Service (USSS)• U.S. Attorney’s Office
Kroll is certified as a Global
PCI Forensic Investigator(PFI) company

Kroll works on …

Kroll works with over…

3200+

68%

Cyber events per year for clients
ranging from Fortune 100 tomedium-sized businesses.

Kroll recognized as a
Representative Vendor for
Digital Forensics and Incident
Response (DFIR) and Managed
Detection and Response (MDR)

93%of theof theFortune 100

AM Law 100

Kroll has a dedicated insurance team for insurance and legal channels,
with extensive relationships with 60+ cyber insurance carriers and exclusive
benefits to insureds.

Kroll named a Global Leader inIncident Response ReadinessNorth AmericaUK

Hong Kong

Additional hotlines at:

T: 877 300 6816T: 808 101 2168

T: 800 908 015

kroll.com/hotlines

Singapore

AustraliaBrazil

Or via email:T: 800 101 3633

T: 1800 870 399

T: 0800 761 2318

CyberResponse@kroll.com

About KrollAs the leading independent provider of risk and financial advisory solutions, Kroll leverages our unique insights, data and technology to help clients stay ahead of complex demands. Kroll’s
global team continues the firm’s nearly 100-year history of trusted expertise spanning risk, governance, transactions and valuation. Our advanced solutions and intelligence provide clientsthe foresight they need to create an enduring competitive advantage. At Kroll, our values define who we are and how we partner with clients and communities. Learn more at Kroll.com.
M&A advisory, capital raising and secondary market advisory services in the United States are provided by Kroll Securities, LLC (member FINRA/SIPC). M&A advisory, capital raisingand secondary market advisory services in the United Kingdom are provided by Kroll Securities Ltd., which is authorized and regulated by the Financial Conduct Authority (FCA).
Valuation Advisory Services in India are provided by Kroll Advisory Private Limited (formerly, Duff & Phelps India Private Limited), under a category 1 merchant banker license issued by
the Securities and Exchange Board of India.
© 2022 Kroll, LLC. All rights reserved. KR190887_Y1022