{"id":11510,"date":"2026-10-13T09:17:45","date_gmt":"2026-10-13T09:17:45","guid":{"rendered":"https:\/\/isoft.ao\/servicos\/resposta-incidentes-criticos\/"},"modified":"2026-10-13T09:17:45","modified_gmt":"2026-10-13T09:17:45","slug":"resposta-incidentes-criticos","status":"publish","type":"page","link":"https:\/\/isoft.ao\/en\/servicos\/resposta-incidentes-criticos\/","title":{"rendered":"Critical incident response"},"content":{"rendered":"
\"\"
Service 03 \u00b7 Cybersecurity<\/span>

Critical incident response<\/h1>

A coordinated response when operations are at risk.<\/p>

Talk to us<\/a>See the scope<\/a><\/div><\/div><\/section>
The solution<\/span>

We support the technical management of serious incidents, from initial assessment and containment to service recovery and measures to prevent recurrence. When ransomware, a compromised account or a data leak stops the business, you need one team that decides what to isolate first, keeps the evidence intact, and brings services back in a safe order. We work alongside your IT team and management and keep communication clear throughout.<\/p><\/div>

Business value<\/h3>

Limit incident spread and guide recovery with clear priorities.<\/p><\/div><\/div><\/section>

Service scope<\/span>

Critical incident response<\/h2>

Four stages, each with a clear deliverable. Where AI helps, it is marked.<\/p>

01<\/span>

Triage, impact assessment and prioritisation<\/h3>

We establish what is affected, what is still trusted, and what must be protected first, within the first hours.<\/p>Triage and correlation<\/span><\/div>

02<\/span>

Containment of affected systems and evidence preservation support<\/h3>

Isolate compromised hosts and accounts without destroying the traces that a later investigation will need.<\/p>Response assistance<\/span><\/div>

03<\/span>

Removal of identified causes and controlled recovery<\/h3>

Remove the access the attacker used, rebuild or clean systems, and restore services in an agreed order with verification at each step.<\/p><\/div>

04<\/span>

Technical coordination, communication and post-incident review<\/h3>

One technical point of contact for management, a timeline of what happened, and a short list of measures to stop it happening again.<\/p>Incident timeline<\/span><\/div><\/div><\/div><\/section>

AI use cases<\/span>

Three AI use cases, all optional<\/h2>

Optional. Every AI feature uses data you approve, can be switched off, and keeps a person in the loop.<\/p>

<\/svg>

Triage and correlation<\/h3>

Groups alerts and log events from different sources so the team sees one incident, not hundreds of signals.<\/p><\/div>

<\/svg>

Incident timeline<\/h3>

Builds a time-ordered reconstruction from logs and actions taken, ready for the post-incident report.<\/p><\/div>

<\/svg>

Response assistance<\/h3>

Suggests next containment steps based on the type of incident and the systems involved, reviewed by the responder.<\/p><\/div><\/div><\/div><\/section>

When this service makes sense<\/span>

A coordinated response when operations are at risk.<\/h2>