24x7 Incident Response

Enlist experienced responders to handle the entire security incident lifecycle.

Contact us
/en-ca/services/cyber-risk/incident-response-litigation-support/incident-response-management service

Kroll Cyber Risk experts respond to over 3,200 security events every year. We manage incidents of all types, complexity and severity for organizations across diverse industries. You can count on Kroll’s unique frontline experience not only in a crisis, but also for proactive planning and mitigation strategies. We are among the top service providers preferred by major cyber insurance companies and offer client-friendly incident response retainers for peace of mind.

Fast and efficient deployment via onsite and remote incident response capabilities

Whether your incident is the result of a malicious hacker or accidental exposure by an employee, Kroll can help now. Our global network of certified security and digital forensic experts can deploy remote solutions quickly and/or be onsite within hours to help you contain the situation and determine next steps.

Kroll is a leading provider of end-to-end cybersecurity, digital forensics and breach response services, and will help you make informed decisions at every stage, from proactive preparation to consumer notification and remediation. Our goal, working alongside your counsel and insurance carrier, is to smoothly guide you to recovery — one that leaves you standing in the best defensible position, reputation intact, and where business can proceed with minimal disruption.

Common Threats Addressed by Our Incident Response Team
Business Email Compromise and Wire Fraud Insider Threats and Accidental Data Loss
Advanced Persistent Threats (APT) Third Party and Vendor-Related Risks
Malware, Keyloggers, and Backdoors Cryptocurrency Theft
Ransomware Targeted Intellectual Property Theft
Payment Card Fraud (PCI/PFI) Web Application Attacks and Password Theft

Kroll offers a continuum of services for the multifaceted nature of incident response

  • Incident Response Preparation and Prevention: Enhance your organization’s ability to respond to cyberattacks with Kroll’s wide range of assessments, tabletop exercises, and intelligence.
  • Intelligent Endpoint Detection and Response: Employing a powerful combination of technology and people, this sophisticated solution enables you to detect and respond swiftly to credible threats.

Watch Managing Director Devon Ackerman discuss the role endpoint detection and response should play in cyber risk in 2021.

Joel Bowers is a managing director
Joel Bowers
Managing Director
Cyber Risk
Devon Ackerman is an Associate Managing Director
Devon Ackerman
Regional Managing Director, North America
Cyber Risk
Paul Jackson
Paul Jackson
Regional Managing Director, Asia-Pacific
Cyber Risk
Hong Kong

How we can help

Computer Forensics

Kroll's computer forensics experts ensure that no digital evidence is overlooked and assist at any stage of an investigation or litigation, regardless of the number or location of data sources.

RelativityOne Litigation Support Services

Kroll’s Litigation Support team has seasoned digital forensics investigators and Relativity-certified administrators to help your team defensibly preserve evidence and gain valuable insights faster, anywhere in the world.

Data Collection Preservation

Improve investigations and reduce your potential for litigation and fines with the strict chain-of-custody protocol our experts follow at every stage of the data collection process.

Incident Response Retainer

Kroll delivers more than a typical incident response retainer—secure a true cyber risk retainer with elite digital forensics and incident response capabilities and maximum flexibility for proactive and notification services.

Cyber Litigation Support

Whether responding to an investigatory matter, forensic discovery demand, or information security incident, Kroll’s forensic engineers have extensive experience providing litigation support to help clients win cases and mitigate losses.

PHI PII Identification

We'll work with you to extract relevant PHI and PII and give you and your legal counsel the best possible guidance around regulation and breach notification.

Office 365 Security Forensics

Digital forensic experts investigate hundreds of Office 365 incidents per year and help strengthen your security.

Data Recovery Forensic Analysis

Kroll's expertise establishes whether data was compromised and to what extent. We uncover actionable information, leaving you better prepared to manage a future incident.

Malware and Advanced Persistent Threat Detection

Our expertise allows us to identify and analyze the scope and intent of advanced persistent threats to launch a targeted and effective response.

Payment Card Industry Services

Kroll offers a wide range of services for both merchants and payment processors, from audits to incident management services, to pragmatic approaches for strengthening your cyber defenses.


KapeTriage MindMap for DFIR Practitioners

Mar 03, 2022

by Eric Zimmerman Andrew Rathbun


Q4 2021 Threat Landscape: Software Exploits Abound

Feb 16, 2022

by Keith WojcieszekLaurie Iacono George Glass


How Kroll is Handling CVE-2021-44228 (Log4J / Log4Shell)

Dec 17, 2021

by Devon AckermanNicole Sette Laurie Iacono, Isaiah Jensen


Locking Your Domain Name Helps Fight Cybercrime

Dec 17, 2021

by Jaycee RothAlan Brill


Kroll Named as a Winner at 2021 Computing Security Awards

Dec 09, 2021


Kroll Responder Recognized in 2021 Gartner Market Guide for Managed Detection and Response Services

Nov 19, 2021


Kroll Wins Cyber Event Response Team of the Year at Advisen Awards 2022

Jun 22, 2022


Kroll Partners with Armis to Extend Preparedness and Response for OT and ICS Environments

May 09, 2022