Services
Incident Readiness and Response Planning
A written plan for a hack, tested with the people who'd have to use it.
When you need it
You need a plan before you need it.
-
Your insurer
"Do you have an incident response plan?"
You geta written plan with names, steps and phone numbers.
-
Your board
"Who makes the call if we're hacked?"
You getclear decision makers, agreed in advance.
-
Your lawyer
"Who do we have to notify?"
You geta summary of who you must tell, and when.
-
Your team
"Have we ever practiced this?"
You geta practice run, and fixes for what it shows.
What you get
Ready before it happens.
-
A response plan
Who does what, and when to escalate.
-
A notification list
Who you must tell, and how to reach them.
-
A practice run
A realistic scenario, worked through with your leaders.
-
A fix list
What the practice showed, tracked to done.
How it works
Simple, start to finish.
-
We write the plan
With your leaders, not just IT.
-
We practice it
In a working session around the table.
-
We fix the gaps
And practice again each year.
Questions
Incident planning questions, answered.
Who should take part in a tabletop exercise?
Your top leaders, IT, legal and communications. The people who'd be making the calls.
Does Heights respond to a live incident?
Yes, through our incident response retainer.
How often should the plan be exercised?
At least once a year, and after any big change.
Insights
Related reading.
-
Governance & Compliance
What Cyber Incident Response Plans Must Contain to Satisfy Regulators
Regulated organizations are accountable for documented incident response plans that meet specific technical and governance requirements. This article explains what every plan must include, who approves it, how often it must be tested, and where executive ownership typically breaks down.
Dr. Daniel Glauber, 20 August 2026
-
Risk Management
What Counts as a Security Incident Under Your Cyber Insurance Policy
Cyber insurance policies require prompt notification of security incidents, but defining what qualifies is complicated. Many organizations lack clear decision protocols, creating delays that can invalidate claims. This article explains how incidents are defined, who should make the determination, and how to establish the governance needed to respond within policy timeframes.
Dr. Daniel Glauber, 16 August 2026
Let's talk.
Not sure what you'd do if you got hacked? Book a call. We'll tell you where you stand and what it takes.