CyberCare by STORM Guidance
CyberCare units for incident response & proactive services
What are CyberCare units and how do they work?
Never waste a premium
Unlike cyber insurance or standard service retainers, CyberCare Enterprise provides you with an investment that is not wasted if you do not have a need for incident response in a given subscription period.
Our cybersecurity retainer turns your investment into tangible security enhancements; Annual fees count as units, usable for proactive services like staff training or security assessments, ensuring you’re protected today and tomorrow.
Understanding the value of CyberCare units
To provide immediate support during a cyber incident, clients can choose a tailored mix of services. This includes Coordination support, Legal and Compliance advice, Crisis PR guidance, and expertise in Digital Investigations and Threat Actor Engagement.
Units can be spent as required. There is no onboarding fee, and the costs of the hotline and availability are factored into the overall single annual fee. The CyberCare service comes with an initial number of units and, when needed, can be topped up with further 25 unit blocks to be used per hour required, as follows:
Virtual CISO: 1 unit
Senior IR Coordinator: 1.5 units
Cyber Security Investigator: 1 unit
Senior Legal Advisor: 1.5 units
Legal Advisor: 1 unit
Forensic/Testing Specialist: 1 unit
Crisis PR Specialist: 1 units
IT Recovery Specialist: 1 unit
Data Mining Specialist: 1 unit
Ransom Negotiator: 1.5 units
Surge Notification Support: 1 unit
Trauma Counsellor (Victims of Crime): 1 unit
Contact the CyberCare team
If you would prefer to speak to the team, give us a call:
London: +44-203-693-7480
Mauritius: +230-434-1277
New York: +1-703-232-9015
Your contact details will only be used in connection with this enquiry. Please read our Privacy Policy.
The additional value of CyberCare units
Your investment means that CyberCare units that are not needed for responding to cyber incidents are not wasted.
They can be used to drive a host of other valuable proactive cyber activities including:
-
Virtual CISO (vCISO) activities; just request our vCISO service proposal
-
Penetration testing and attack surface scanning (including on third-parties)
-
Additional cyber risk assessments or cyber incident exercises
-
Regular Threat Intelligence (TI) reports
-
Staff Awareness campaigns (computer-based training)
-
Fraud Prevention briefings
-
Data protection & privacy and other regulatory advice
Typically, unused CCE Units would be used towards the end of a subscription period although as long as the minimum balance is maintained they can be used at any time for any of the assignments above.
-
A minimum balance of 20 units must be maintained in credit to ensure that immediate incident response service is always available.
-
If units are run down then clients have the option to renew them in top-up blocks of 25 as required, either during or following an incident.
We will always be happy to give estimates as to how many units would be needed to conclude the investigation and recovery for any given cyber incident or other assignment.
-
CCE also allows up to 20 unused CCE Units to be taken over as a credit to a following years subscription (up to a maximum of 3 years). These units must be used within the first quarter of the new subscription. Any remaining units, will expire at each subscription anniversary if unused.
-
Offboarding part way through a period will result in a fee rebate for those months left to go to the anniversary, less a cancellation fee in ‘lieu of notice’ equal to 3 months.
Offboarding in the last quarter prior to annual renewal will not result in a rebate or cancellation fee as long as at least 30 days’ notice is given otherwise a renewal will be expected and the cancellation fee will apply.
-
Annual renewal fees may be subject to review and any rise in fees will be advised at least 30 days prior to the end of the period
-
