Cyber Risk Retainers

Kroll delivers more than a typical incident response retainer—secure a true cyber risk retainer with elite digital forensics and incident response capabilities and maximum flexibility for proactive and notification services.

/en-ca/services/cyber-risk/incident-response-litigation-support/cyber-incident-response-retainer /-/media/feature/services/cyber-risk/incident-response-litigation-support-desktop-banner.jpg service

When faced with a cyber incident, your organization must be prepared to respond quickly and effectively to protect your operations, reputation and bottom line. Timely response and notification for cyber incidents is also mandated by many privacy and consumer protection laws. Prepare now with Kroll’s  cyber risk retainer.

Kroll’s cyber risk retainer offers maximum flexibility with transparent pricing so you get tangible value for your retainer dollars and gain peace of mind knowing you can depend on Kroll’s prioritized response and global resources in a crisis. You also have options to leverage a wide array of our end-to-end cyber risk solutions to strengthen your overall resiliency.

Customizable Incident Response Retainer

Kroll knows that for clients, the prospect of preparing for and dealing with a cyber incident is fraught with unknowns. That’s why we created a robust but flexible retainer to adapt to your business, while providing you with the comfort that Kroll’s team of forensic experts will respond to contain and remediate an incident. From preparedness services to breach response, Kroll’s cyber risk retainer services are configurable to your needs and environment regardless of the technologies you use.

A Kroll cyber risk retainer guarantees expedited response as well as notification and proactive services to minimize the impact of an incident. Our retainer options address the pressure organizations feel to maximize the value of cyber security investments with upfront pricing and service structure, delivering:

  • Prompt access to an elite, global team of 300+ incident response and breach notification experts
  • Rapid response service levels to provide peace of mind in the event of an emergency
  • Robust preparedness services, including tabletops, simulations, risk assessments, penetration testing, policy reviews and strategic advisory
  • Flexibility to choose from a wide range of cyber services
  • Ability to roll over a percentage of unused credits
  • No minimum hourly usage requirements or lead times
  • Technology-agnostic services can be catered to your specific security stack
  • Rate discounts for hourly cyber security services offered by Kroll

In addition, cyber insurance plays an integral role in mature cyber security programs. Kroll is an approved vendor for over 50 cyber insurance carriers worldwide, with a dedicated insurance team that can help handle claims efficiently.

Choose the Cyber Risk Retainer Option That Fits Your Organization’s Posture and Need



Remote Support

Incident support contact within four hours (24/7/365)

Incident support contact within six hours (24/7/365)

Onsite Support

In transit within 24 hours of request or SOW signature
(for additional services)

Rollover Credits

Up to 20% of unused services credit may be applied to the following year upon renewal

Rate Discount

15% discount on any additional hourly-based proactive or incident response cyber risk service

10% discount on any additional hourly-based proactive or incident response cyber risk service

Customize Your Retainer for Optimal Coverage

Unlike other firms, Kroll gives you the opportunity to customize cyber risk retainers with a wide variety of proactive, response and notification services best suited for your situation and goals. Below are just a few examples of the services available:

Proactive Services

Incident Response Services

Notification and Monitoring Services

Several additional services are available. For a complete list, get in touch with our team.

Peace of Mind and Expert Support Just a Call Away

Kroll manages over 2000 cyber investigations every year for clients of all sizes and complexities. We also have decades of experience helping clients notify customers affected by breaches. We can help you determine the right cyber risk retainer for you, beyond incident response. For peace of mind and support before and during an incident, speak with one of our cyber experts today.

Incident Response and Litigation Support

Contact Us


Cyber Risk

Global, end-to-end cyber risk solutions.

Cyber Risk

Kroll Responder

Mature your cyber security with unparalleled visibility and constant protection.

Kroll Responder



KAPE Quarterly Update – Q3 2021


Diagnostic Data Viewer Overview


Enabling EventTranscript.db: Windows Settings


EventTranscript.db and Security Events



KAPE Intensive Training and Certification Live Webcast Sessions



Lunch & Learn: Navigating Increased Transactional Risk Scrutiny



10 Essential Cyber Security Controls for Increased Resilience and Better Insurance Coverage