DIF

Digital Forensics and Incident Response

After detection comes response.
Security Incident Response - take targeted and effective action in the event of security incidents

"What artefacts does the system contain? What do these traces indicate?
Is there any experience with comparable IT security alerts?
Incident response is about targeted, swift action."

Karolina Czerkowski
Security Operations Lead at ConSecur GmbH

What do we do when it happens?

Every security incident is an emergency that we deal with quickly, in a structured and targeted manner. In the event of a security incident, IT security analysts at ConSecur GmbH alert the in-house IT department via predefined reporting channels and initiate the security incident response.

The security incident response is the joint, effective action of the in-house IT department and Cyber Defence Center to avert security incidents and prevent damage to network infrastructures.

CDC initial measures

In concrete terms, we take initial measures in the CDC like an emergency doctor who has arrived at the scene of an accident and is treating those affected: we isolate the systems that have become the target of the attack so that damage does not spread or does not spread further. In the second step, we clean up the systems so that in the third step the transition to normal operations can take place.

This cohesive, coordinated approach is the result of the seamless collaboration that we at ConSecur strive for to maximise protection.

Feel free to contact us

Do you have any questions about our cyber defence solutions or do you need advice on CDC?
Our team of experts will be happy to help!

Book a consultation

Stephan Ilic

CDC-Manager