Thu, May 26, 2022

Kroll Expands Cyber Incident Recovery Services

New Partnership to Meet Growing Demand for Cyber Restoration Services Following Cyber Incidents and Resilience Assessments

New York – Kroll, the leading provider of data, technology and insights related to risk, governance and growth, announced today that it has expanded its incident recovery service for clients, including those responding to an incident and those acting on a resilience assessment to manage vulnerabilities and plug gaps in their security posture.

Through a close partnership with PCS LLC and its Critical Incident Response Team (CIRT), Kroll can help clients with cyber recovery services, including Active Directory, Exchange and Hypervisor recovery, backup assessment and recovery, server recovery, endpoint reimaging, patch management and network containment. Clients will benefit from a combined team that becomes an extension of their own IT department and from access to Kroll’s complete response capabilities that stretch from initial investigation to containment, threat eradication, data review, breach notification and litigation support.

Ben Demonte, COO for Kroll’s Cyber Risk practice, said: “The key in responding to a cyberattack is minimizing the business interruption caused and building resilience for the future. While you would expect that the initial attack would put the organization in crisis mode, what many underestimate is how long business interruption can last. One of the pivotal moments is getting operations back up and running. This is no small feat and often includes an entire task force dedicated to the rebuilding and reimaging of devices.”

Demonte continued: “We’re thrilled to be able to expand our recovery service as part of Kroll’s unrivaled incident response. For many organizations and their insurers, this is one of the final pieces of the puzzle to putting the cyber incident officially behind them and stepping into a more secure future.”

Anthony Mongeluzo, President of PCS, said: “It is well documented that the cyber security industry has a skills gap, where getting people with both the technical capability and the experience in the right place at the right time can be difficult. In the event of an incident or as a reaction to an assessment that has revealed vulnerabilities, technical recovery happens against the clock. At PCS, we pride ourselves on our speed, agility and technical knowledge. We’re excited to be partnering with Kroll and opening up our services to a greater pool of potential clients.”

Kroll’s response team, now including expanded recovery capabilities, are available 24x7 via our hotlines. Kroll’s cyber recovery services can also be made available through your insurance provider.

About Kroll
Kroll provides proprietary data, technology and insights to help our clients stay ahead of complex demands related to risk, governance and growth. Our solutions deliver a powerful competitive advantage, enabling faster, smarter and more sustainable decisions. With 5,000 experts around the world, we create value and impact for our clients and communities. To learn more, visit

About PCS
PCS is an award-winning company with offices throughout the United States. Our clients include a broad range of industries powered by on-premises or cloud-based solutions; frequently a mix of both. PCS creates custom IT solutions that solve clients' business needs. We offer fully managed services, project-based work, help desk solutions, outsourced CIO, and general consulting for a company's technology needs. To learn more, visit


Cyber Risk

Incident response, digital forensics, breach notification, managed detection services, penetration testing, cyber assessments and advisory.

Incident Response and Litigation Support

Kroll’s elite security leaders deliver rapid responses for over 3,000 incidents per year and have the resources and expertise to support the entire incident lifecycle.

Computer Forensics

Kroll's computer forensics experts ensure that no digital evidence is overlooked and assist at any stage of an investigation or litigation, regardless of the number or location of data sources.

Threat Exposure and Validation

Proactively identify your highest-risk exposures and address key gaps in your security posture. As the No. 1 Incident Response provider, Kroll leverages frontline intelligence from 3000+ IR cases a year with adversary intel from deep and dark web sources to discover unknown exposures and validate defenses.

Incident Remediation and Recovery Services

Cyber incident remediation and recovery services are part of Kroll’s Complete Response capabilities, expediting system recovery and minimizing business disruption.