Know who you are calling before you need to call.
Priority response, 24/7
Our 0800 line is answered by a live call centre around the clock. Retainer clients are engaged ahead of general enquiries — with terms already signed, your environment already documented, and no procurement to work through first.
Three plans, from $200 +GST per month.
When something goes wrong, the worst time to start looking for a forensic investigator is after it has already happened.
When dealing with your health, you know in advance who your doctor is. For forensic technology and cyber security matters, you should also have a professional provider on 0800-speed dial. You also get access to a comprehensive network of associated professionals — legal, privacy, insurance and communications specialists — who we work alongside routinely during incidents.
Three retainer plans
| Included | Starter | Standard | Premium |
|---|---|---|---|
| Monthly cost | $200 +GST | $500 +GST | $1,000 +GST |
| Welcome pack and initial consultation | Yes | Yes | Yes |
| Access to our panel of experts | Yes | Yes | Yes |
| Support desk for ad-hoc queries (up to 30 min per month) | Yes | Yes | Yes |
| NZ Incident Response Bulletin, Premium Edition | Yes | Yes | Yes |
| Annual forensic readiness assessment | — | Yes | Yes |
| Annual incident response plan drafting or review | — | Yes | Yes |
| Board briefing packs and deep-dive presentations | — | Yes | Yes |
| Control Room incident portal and ops tools | — | Yes | Yes |
| Annual cyber incident tabletop simulation | — | — | Yes |
| Discounted forensic technology rates | — | — | Yes |
What each element actually means
- Welcome pack and initial consultation — we walk you through how to get the most out of the service, and capture the environment details we would otherwise have to gather mid-incident.
- Panel of experts — forensic, cyber, legal and communications specialists who are briefed and ready to help.
- Support desk — up to 30 minutes per month of ad-hoc advice, sometimes described as a vCISO service. Useful for the questions that are too small to warrant a project but too important to guess at.
- Premium Bulletin — the subscriber edition of our monthly NZ Incident Response Bulletin, which we have published every month since 2019.
- Forensic readiness assessment — an annual review of whether you are actually able to investigate an incident: logging, retention, access, and evidence handling.
- Incident response plan — annual assistance drafting or revising your cyber incident response plan so it reflects your current environment, not the one you had three years ago.
- Board briefing packs — board-ready material and deep-dive presentations for directors who need to demonstrate cyber governance.
- Control Room — access to our incident response portal and ops tooling for running an incident.
- Tabletop simulation — a facilitated annual cyber incident simulation to test the plan against your actual people.
- Discounted forensic rates — reduced hourly rates on our forensic technology expert services when an incident does occur.
Why a retainer rather than calling us when it happens
We will help you either way. But in an incident, the first few hours matter more than any other part of the engagement, and without a retainer those hours are spent on things that have nothing to do with the attack: agreeing scope, signing terms, arranging payment, explaining your environment from scratch, and working out who at your organisation can authorise what.
A retainer moves all of that to a calm day in advance. It also means someone has already looked at whether you can investigate an incident at all — many organisations discover during a breach that the logs they needed were never retained.
Who this is for
Typically New Zealand organisations that hold sensitive information or carry regulatory obligations — law firms, financial service providers, professional services firms, public sector agencies, and companies with boards asking harder questions about cyber governance.
If your focus is adopting a cyber framework and a set of controls rather than incident readiness, our virtual CISO service may suit you better.
Enquire about a retainer
Tell us a little about your organisation and we will come back to you within one business day with a recommendation on which plan fits.
Thank you for your response. ✨
You can also email support@incidentresponse.co.nz or call 0800 WITNESS (0800 948 637). If you already know which plan you want, skip straight to our fast track sign-up form.
Download the detail
These guides summarise the key issues executives face when managing cyber incidents, including the elements of our Incident Response Retainer.
Incident Response Solutions 