The plan
Roles, escalation, insurer and legal notification steps, communications, and decision rights, checked against how your business actually runs.
Who it's for
Leadership teams with an incident plan on paper, or none at all, that want to know whether it would hold.
When to call
- Your insurer asked for a written incident response plan or a recent tabletop exercise
- You've never tested a full restore from backup
- Nobody is sure who calls the insurer, the lawyer or law enforcement first
- A company like yours was just hit
What gets checked
Evidence, not opinion.
The backups
One restore, run by your team or provider while Tullio IT watches and records it, to show whether it comes back clean and how long it takes. Separately, whether the backups would survive an attacker with admin access: how they are isolated, whether they can be changed or deleted, and who holds that power.
The tabletop
A realistic scenario walked through with your leadership team, so the gaps show up in a conference room instead of during an attack.
What you get
Written down, and signed.
- A marked-up plan with each gap closed or assigned
- A tabletop report with decisions, gaps and owners
- A short list of the controls insurers check first
FeeFixed fee, from $3,500.
TimingTwo to three weeks from kickoff to tabletop.
Independent by design
Nothing to resell.
Tullio IT sells no hardware and no leases, marks up no software, and takes no referral fees from any provider it reviews. It never audits a service it provides.
Get in touch
Tell us what's keeping the systems, or the board, up at night.
A short conversation is the fastest way to know if there's a fit. No deck, no pitch. Just a direct read on the problem.