Cyber incident response 24/7RESPONSE
When every minute counts.
In the event of a cyberattack, our experts step in 24/7 to contain, investigate and restore, and support you with the DGSSI and your insurers.
What we hear
in the field.
Panic
Encrypted screens, a ransom demand: without a plan, bad decisions follow one another.
Evidence wiped
Restarting or reinstalling too quickly destroys the traces needed for the investigation and the insurance claim.
Reporting obligations
Some organisations must report their incidents to the DGSSI and their data breaches to the CNDP.
What we take care of.
Intervention
- 24/7 emergency line
- Immediate remote response
- On-site team in Morocco
- Crisis unit
Containment
- Isolation of affected systems
- Blocking of the attacker’s access
- Protection of backups
- Crisis communication
Investigation
- Forensic analysis
- Origin and extent of the attack
- Exfiltrated data
- Report for insurers and the courts
Recovery
- Restore with Nodeacore
- Post-incident hardening
- DGSSI / maCERT and CNDP reporting
- Lessons learned
Three levels, tailored
to your scope.
Monthly subscription or fixed price, depending on the service.
On demand
- Response subject to availability
- Emergency daily rate
- Investigation and report
- Help with restoring
Retainer
- Guaranteed 24/7 response
- Response days included
- Response plan prepared in advance
- Preferential rate
Retainer +
- Annual crisis exercise
- Compromise assessment
- On-site response kit
- Integration with RADAR
How we work.
Alert
Emergency call, first instructions.
Containment
Stopping the spread.
Investigation
Understanding and evidence.
Recovery
Restore and lessons.
What you receive.
Who it is for, in practice.
Retail group
Ransomware: containment, investigation and restore with Nodeacore.
Medical practice
Data breach analysed, CNDP declaration supported.
Exporting SME
Payment fraud: investigation and file for the bank and the police.
Typical scenarios, shown for illustration.
Your questions,
our answers.
What is RESPONSE?
RESPONSE is the “Incident response” offer from Cyberacore, a cybersecurity entity based in Casablanca. In the event of a cyberattack, our experts step in 24/7 to contain, investigate and restore, and support you with the DGSSI and your insurers.
What does RESPONSE include?
RESPONSE covers four areas: Intervention (24/7 emergency line, Immediate remote response), Containment (Isolation of affected systems, Blocking of the attacker’s access), Investigation (Forensic analysis, Origin and extent of the attack) and Recovery (Restore with Nodeacore, Post-incident hardening).
What are the service levels of RESPONSE?
Three levels, on a monthly subscription or at a fixed price: On demand (Response subject to availability, Emergency daily rate); Retainer (Guaranteed 24/7 response, Response days included); Retainer + (Annual crisis exercise, Compromise assessment).
How does a RESPONSE project start?
In four stages: Alert (Emergency call, first instructions), Containment (Stopping the spread), Investigation (Understanding and evidence) and Recovery (Restore and lessons). The Cyber Score Express helps frame the need beforehand.
Let’s talk about your
information system.
An assessment to take stock: a concrete review, presented by our experts.