Security Incident Management

A retainer-based incident response service: choose how many hours to keep our team on standby, get 24/7 access when an incident strikes, and redeem 80% of unused hours for our other security services and products.

Rapid Response and Expert Support for Your Organization's Critical Moments

In today's interconnected world, cyber threats are an unfortunate reality for businesses of all sizes. A prompt and effective response to security incidents can make all the difference in minimizing the impact of a breach or cyberattack on your organization. Sage Infrastructure Solutions Group's Security Incident Management services provide round-the-clock support, ensuring that you have immediate access to expert assistance when you need it most.

Our customizable 24/7 support line provides direct access to our team of skilled security professionals, ready to assist your organization throughout the incident response process. We offer service level agreements (SLAs) that cater to your organization's specific needs, ensuring a rapid, personalized response to help you swiftly contain, investigate, and recover from cybersecurity incidents.

Sage Infrastructure coworkers assessing security risks

How the retainer works

An incident response team on retainer

Security Incident Management is a retainer-based service. You decide how many incident response hours you want to keep in reserve, and our team is ready to respond the moment you need us, with no procurement delays in the middle of an incident.

  1. Choose your hours

    Pick how many incident response hours you want to retain our team for over the term of your retainer.

  2. We stay ready

    Our team is available to your organization around the clock, with response times set in your service level agreement.

  3. Call us when something happens

    Contact our 24/7 support line and we start working on the incident straight away. Time spent on your incident is drawn down from your retained hours.

  4. Track every hour

    See how many hours you've used and how many remain at any time in our drawdown customer portal.

Unused hours don't go to waste

Hours you never needed become other security work

A quiet year is the best outcome, and it shouldn't cost you the value of your retainer. Hours used for incident response count at their full value. At the end of your term, 80% of any hours you didn't use become credit for our other cybersecurity services and products.

Your retainer termIncident response on callHours are drawn down for any incidents you call us for.
Up to 12 months after the termRedeem 80% of unused hoursPut leftover hours toward penetration testing, gap assessments, advisory services or any other service or product we offer.

A 20% availability fee applies to unused hours. It covers the cost of keeping our staff available to respond under your retainer throughout the term. For example, if 50 retained hours go unused, you have 40 hours to apply to other services or products.

Drawdown customer portal

Always know where your retainer stands

Retainer customers can track their incident response entitlements in the drawdown view of the Sage ISG customer portal, so you never have to ask how many hours you have left.

Sign in to the customer portal

  • Hours retained

    The incident response hours included in your retainer.

  • Hours used

    Time drawn down for each incident we handle for you.

  • Hours remaining

    What is still available to your organization this term.

  • Redemption

    The 80% of unused hours you can put toward our other services or products after your term ends.

FAQ

Retainer questions, answered

How many hours should we retain?

It depends on the size of your environment, how much of your incident response you handle in-house, and your appetite for risk. We'll help you choose a number that fits.

What happens to hours we don’t use?

Every hour used for incident response counts at full value. At the end of your term, 80% of any unused hours can be redeemed for our other cybersecurity services or products for up to a year. The other 20% is an availability fee that covers keeping our team ready to respond during your term.

How do we track our hours?

Sign in to the Sage ISG customer portal at login.sageisg.com. Its drawdown view shows the hours you have retained, used and remaining, and what is available to redeem.

How quickly will you respond?

Response times are set in your service level agreement, and our 24/7 support line gives you direct access to our team whenever you need us.

Key Outcomes of our Security Incident Management Services:

Immediate Access to Expert Support

Our 24/7 hotline guarantees that you have access to our team of skilled security professionals whenever you need them, ensuring that your organization receives expert guidance and support during critical moments.

Customized Response Times

With our flexible service level agreements, you can choose the response time that best fits your organization's needs, allowing you to balance cost and urgency in a way that suits your unique circumstances.

Minimized Impact of Incidents

Our rapid response and expert assistance enable your organization to quickly contain and mitigate the effects of security incidents, minimizing the potential damage to your reputation, customer trust, and bottom line.

Comprehensive Incident Resolution

Our security incident management services cover a range of stages of the incident response process, from initial assessment to investigation, remediation, and post-incident review, ensuring that your organization is fully supported throughout the process.

Proactive Approach to Security

Our post-incident review process helps identify areas for improvement in your organization's security posture, enabling you to proactively address existing threats and strengthen your defenses against future threats.

Put an incident response team on retainer before you need one.

Tell us about your organization and we'll help you choose the right number of retained hours and the response times that fit.
Contact Us