IR-1 is for small and medium sized enterprises in the Asia Pacific region with fewer than 500 endpoints, and with limited IT and security resources. IR-1 has been designed to help these organisations recover from a cyber attack (hacking) incident.

IR-1 is an annual subscription. You get:

• One incident response in case of a hack: You receive an IR-1 credit which you activate in case of a suspected attack.
• Weekly recurring security scans: We identify vulnerabilities in your systems and alert you to critical gaps in your defence.
• Cyber security resources: Practical guides on setting up cyber security tools and processes, in-depth reports on malware trends, and other actionable information for you and your team.

Nothing is installed on your systems. Blacklight, our attack surface management tool works in the cloud and does not require any plugins or agents either.

Log on to ir1.blackpanda.com to report a cyber incident and activate the IR-1 incident response service. An incident responder will be in touch to walk you through the best course of immediate action. In most cases, this initial contact happens within an hour of the incident being reported.

The IR-1 credit entitles you to incident response in case of a cyber emergency. It grants you access to our incident response specialists, digital forensics and security professionals (applicable to qualified cyber incidents only). Your IR-1 credit includes root cause and scope of breach investigation, incident remediation and a final report on findings and recommendations. The credit does not include restoration of business activities and implementation of extended remediating actions.

A cyber incident is defined as such if it includes Basic Web Application Attacks, System Intrusion, Business Email Compromise, Malware or Ransomware. In addition, a qualified cyber incident must satisfy the following two criteria:

• The compromise date must be later than the registration/renewal of the IR-1 subscription.
• The root cause/cause of the incident must be different from any previous incident for which IR-1 has been activated, unless Blackpanda-approved mitigation measures have been implemented.

When we receive your Incident Response activation request, our multidisciplinary regional responders are activated and will start to investigate the suspected incident immediately. As such, regardless of whether the investigation reveals the incident to qualify for our services or not, your IR-1 credit will be redeemed.You may, however, wish to continue with our digital forensics and incident response services at a preferred rate (up to 20% in savings), and continue to use our cyber security e-resources.