Security Incident Response: 1-Week Assessment
IT Partner LLC
Security Managed Service: Incident Response is a fixed-price investigation for companies that have experienced or suspect an information security incident: unauthorized employee access, disclosure of confidential information, virus or ransomware activity (encrypted or blocked data), suspected crypto miner activity, spam sent from employee accounts, or malicious software on the company website. IT Partner specialists analyze your infrastructure and event logs, interview users if necessary, and deliver a report on the incident with recommendations to prevent recurrence.
Microsoft 365 focus
For organizations running Microsoft 365, the investigation draws on the security and audit data already in your tenant, such as Microsoft Entra ID sign-in logs, the Microsoft Purview audit log, and Microsoft Defender alerts, and the recommendations show how to extend your use of Microsoft 365 security capabilities so the same incident does not happen again.
Deliverables
- A written incident report based on the results of the investigation.
- The information obtained about the incident, from the analysis of infrastructure, event logs, and user interviews where needed.
- Recommendations to improve security and prevent the same incident from recurring.
Implementation plan (1 week)
- Kickoff meeting: Agree the incident description, investigation scope, points of contact, and the access needed for the analysis.
- Client provides incident details: You provide the available details about the incident, affected systems, timelines, and any existing logs or evidence.
- Analysis: IT Partner specialists analyze the infrastructure and event logs, and interview users if necessary, to reconstruct what happened.
- Report delivery: IT Partner prepares and delivers the incident report with findings and recommendations to prevent recurrence.
Out of scope
- Purchasing licenses for products
- Setup of products and services that are not required for incident investigation
- Implementation of products and solutions proposed by the results of the report
Pricing
Fixed price of $700 USD per project for the scope described above, quoted in writing before work begins, and you pay after you approve delivery. Microsoft license and consumption costs are separate.
About IT Partner
IT Partner has helped organizations adopt and get more from Microsoft cloud services since 2006.
Next steps
Select Contact me on this page to confirm your scope and book a start date. Full service details and FAQs are on the Security Managed Service: Incident Response service page.