Incident response consulting firms assess the incident, contain the threat, eradicate the cause, recover systems, and apply lessons learned to prevent future incidents. They also communicate with stakeholders throughout the incident response process.