Incident Response Retainers: Scope, Activation and Costs
Review an incident-response retainer through activation terms, availability, decision authority and costs. Use the worksheet to separate acknowledgement from containment and record evidence handling, escalation and the work your team retains.