Incident Response Retainer Program

As part of the Response & Remediation Services offered through a retainer, customers have access to the following:

• Dedicated ICS incident responders from Dragos
• Local and trusted field service engineers and global network services resources from Rockwell Automation
• Coordination from Rockwell Automation Project Management to direct collaboration and resource allocation

Failing to plan ahead with an incident response retainer is one of the five most costly mistakes that industrial organizations make in OT cyber incident response. Organizations without a retainer invariably pay a higher hourly rate for response services when they need them. Plus, they don’t have an established service level agreement with a vetted firm, leaving them at the mercy of whoever is available when they’re in the heat of an incident.

“During an incident, an organization without a retainer may have to contact multiple security firms to find one with availability, as most credible firms are very busy and prioritize retainer customers,” explains Lesley Carhart, Director of Incident Response for Dragos. “Onboarding and preparation will have to be conducted while the incident is ongoing.”

A retainer relationship doesn’t just minimize the cost and the time it takes to get an external OT incident response team up to speed while incidents are unfolding. The hours customers purchase can also be used to prepare for future incidents proactively by improving OT cybersecurity architecture, security visibility, and response plans.

“The other big benefit of this retainer program is that when there isn’t an incident over the course of the year, customers can utilize those unused hours on other proactive draw down services,” Bayer says. “They can use these hours to improve their security posture to minimize the impact of future incidents.”

As an added benefit, customers can tap into a range of assessment and training services from both Rockwell Automation and Dragos. Enhanced by the visibility afforded by the Dragos Platform, Dragos Assessments include Crown Jewel Analysis, Compromise Assessments, Tabletop Exercises, and Readiness Assessments. Customers can also engage with Dragos for training services and to develop a collection management framework to improve visibility into their environments. In addition, retainer customers can draw down services like network assessments, security posture surveys, and network hardening from Rockwell Automation.

Contact us today to learn more about the Joint Incident Response Retainer program and schedule an expert consultation.

Article originally published in Automation.com.