DIGITAL FORENSICS & INCIDENT
RESPONSE (DFIR)
DATASHEET
BE BREACH READY 24×7
Pre contracted, SLA backed access to elite responders for both war-time
(breach) and peace time (readiness) needs. Build tangible resilience with
flexible hour banks, transparent pricing, and board grade assurance.
WHAT YOU GET (ALL PACKAGES)
YOUR BENEFITS
• Premium: subscription to Threat Advisories from
the region’s largest CTI team, access to
geo-curated intelligence
• Elite I & Elite II: subscription to Threat Advisories
plus a quarterly dedicated Threat Landscape
report for your organization. Additionally
leverage set of proactive services from the
pre-published Active Defense service packs, to
continually improve your security posture
DELIVERABLES & SLAs
• Kickoff & IR readiness: stay assured with CPX
DFIR teams’ onboarding that develops familiarity
with your environment – no surprises, no chaos,
during breach situations
• Daily updates during active incident
investigations
• Benefit from swift IR support with industry-best
SLAs* of 2 hours (remote) and 4 hours (onsite)
• Gain deeper insights with comprehensive
reporting – understand the anatomy of the
breach and actions to prevent recurrence and
build resilience
*check applicable SLAs for your selected package
24×7 incident hotline &
triage with guaranteed
support
Assigned incident lead
and access to an elite
responder squad
Industry best SLAs for
onsite & remote
engagements
Board-grade assurance via
structured communication,
defensible forensics and
detailed reporting
WHY THIS RETAINER
• Faster response, predictable cost – SLA backed access to senior
IR expertise with pre-defined cost & coverage
• Use it or improve it – Convert unused hours into proactive
readiness and improved maturity
• Transparent governance – Assigned SPOCs, clear RACIs,
communications plan, and reporting
• Enterprise grade forensics – Proven methodology, chain of
custody, comprehensive reports
• Quick triage and rapid response – Fast analysis of key artifacts to
gain essential insights into the attack, enabling informed decisions
and timely containment actions.
EmergencyElite IIElite IPremiumAdvancedEssential
Contact us to schedule a discovery session or request a proposal.
responsecenter@cpx.net
8002255279 | 800CALLCPX
DIGITAL FORENSICS & INCIDENT RESPONSE (DFIR) – DATASHEET
CPX IR PACKAGES
GET
STARTED |
Learn more about our Cyber Resilience Services:
https://www.cpx.net/services/cyber-resilience-services/
Disclaimers:
*un-used hours can be rolled over to next annual prepaid package of same #hours or more and if not re-purposed
**for the engagement timeframe
Prices for all packages are applicable for onsite IR services (within AD municipality), and will require adding travel on actuals (outside of AD municipality)
For Premium package – Unused hours can be re-purposed only during the last quarter of the contract year.
For Elite I & Elite II packages – Unused hours can be re-purposed starting from the third quarter of the contract year.
HOW IT WORKS
Pick a
package
Sign
MSA/SOW
IR
Onboarding
Workshop
Always On
24/7 Hotline
Consume
Hours
Periodic
Reviews
Annual Coverage
24×7 Guaranteed Support
IR Readiness
24×7 IR priority Onsite
support for incidents
Exposure/CTI
Services
Re-purpose
unused hours
IR tools**
Roll-over unused
hours
IR SPOC (8×5)
Service Review Meetings
Retainer Model
Retainer Fee Term
80 hours/year
Yes Yes Yes Yes Yes No
Yes Yes Yes Yes Yes No
Yes Yes Yes Yes Yes Yes
No No Yes Yes Yes No
Bi-Annual Bi-Annual Bi-Annual Bi-Annual Quarterly Ad-hoc
fixed prepaid fee fixed prepaid fee fixed prepaid fee subscription fee subscription fee
Fixed jump-start
initial fee
annual upfront
payment, T&M
payment per block-
hours beyond
package
annual upfront
payment, T&M
payment per block-
hours beyond
package
annual upfront
payment, T&M
payment per block-
hours beyond
package
monthly/annual
payment, T&M
payment per block-
hours beyond
package
monthly/annual
payment, T&M
payment per block-
hours beyond
package
T&M payment per
block-hours
beyond package
No Yes Yes Yes Yes No
No No
Subscription to
CPX Threat Advisories
+ Quarterly external
exposure scan
Subscription to CPX TA +
Monthly External
Exposure Scan +
Quarterly Threat
Landscape Report
Subscription to CPX TA +
Monthly External
Exposure Scan +
Monthly
Darkweb Leakages
Scan + Quarterly Threat
Landscape Report
No
No No
Yes, 100% hours can
be applied towards
any CPX offered
Active Defense
services, within
available hours
Yes, 100% hours can
be applied towards
any CPX offered
Active Defense
services, within
available hours
Yes, 100% hours can
be applied towards
any CPX offered
Active Defense
services, within
available hours
No
No No
Yes, 20% un-used
hours can be rolled
over to next annual
prepaid package*
Yes, roll over to next
month(s), 20%
un-used hours can be
rolled over to next
annual subscription
package*
Yes, roll over to next
month(s), 20%
un-used hours can be
rolled over to next
annual subscription
package*
No
140 hours/year 200 hours/year 25 hours/month =
300 hours/year
50 hours/month =
600 hours/year N/A
