Gartner Names Kroll a Representative Vendor for Digital Forensics and Incident Response Services Third Year in a Row

New York – Kroll, the world’s premier provider of services and digital products related to valuation, governance, risk and transparency, today announced that its Cyber Risk practice has been named in the 2021 Gartner Market Guide for Digital Forensics and Incident Response Services for the third consecutive year, confirming its position as a leading incident response provider. Kroll’s place in the guide reflects its continuum of services addressing the multifaceted nature of incident response, including digital forensics, malware analysis, incident readiness services such as tabletop and red teaming exercises, and breach notification services.  

The 2021 Gartner Market Guide for Digital Forensics and Incident Response (DFIR) examines trends in this evolving market and outlines common characteristics of incident response (IR) agreements, how to find the right vendor, maximize cyber insurance policies and benefits, and limitations some vendors may carry. 

“We are proud to have been recognized once again among the leading IR vendors in the world. Kroll handles thousands of cyber incidents every year across a variety of industries, leveraging our deep investigative background and frontline threat intelligence to help clients respond confidently no matter the threat,” said Ioan Peters, managing director in Kroll’s EMEA Cyber Risk practice.  

The Gartner DFIR market guide recommends security leaders consider both proactive services, ranging from compromise assessments and incident response plan development to simulations and tabletop exercises, and reactive services, such as malware analysis, digital forensics and threat intelligence. Kroll is uniquely positioned to deliver effective proactive and reactive solutions thanks to its frontline expertise, proprietary digital forensics tools, extensive relationships with cyber insurance and law firms, and client-friendly retainers. 

The guide also advises favoring DFIR providers with deep knowledge of and experience in handling evidence and supporting court cases as incident response investigations go much further than responding to alerts and require the mindset of a forensic examiner to know the right artifacts to examine, the proper way to collect evidence and how to support clients in the event of litigation.

In response, Rob Phillips, associate managing director in Kroll’s APAC Cyber Risk practice commented: “No matter the threat, Kroll has the experience and resources (human and technology) to respond quickly, discern, isolate and secure valuable evidence to investigate the digital trail, wherever it may lead. We have the proven expertise to help organizations make confident decisions at every stage of the incident.” 

“Clients also benefit from our DFIR expertise with Kroll Responder, our managed detection and response solution staffed by seasoned investigators. With our unlimited response capabilities, we help shorten the entire incident lifecycle, with detection, investigation, remediation, notification, monitoring and restoration under a single agreement, something no other cyber security provider is able to match.” 

Gartner clients can download the DFIR market guide here. More details about previous editions of the Gartner Market Guide for Digital Forensics and Incident Response can be found here and here.

About Kroll
Kroll is the world’s premier provider of services and digital products related to valuation, governance, risk and transparency. We work with clients across diverse sectors in the areas of valuation, expert services, investigations, cyber security, corporate finance, restructuring, legal and business solutions, data analytics and regulatory compliance. Our firm has nearly 5,000 professionals in 30 countries and territories around the world. For more information, visit www.kroll.com.