The cyber incident response retainer

24/7 incident response retainer with built-in cyber resilience

CyberCare is STORM’s flexible cyber incident response service. It is a unique retainer that ensures 100% of unused response time isn’t wasted - it can be repurposed for proactive services that strengthen your defences. With two tailored packages and a unit-based model, CyberCare helps you build resilience, prepare for the worst, and respond rapidly.

Speak to the team

Built for response, and readiness

CyberCare ensures you're ready to respond and prepared to prevent.

24/7 access to IR specialists

Flexible, unit-based pricing

No wasted retainer hours

Proactive services included

Standard and Enterprise options

View Packages

The CyberCare Retainer is offered in two packages

Choose the level of integration, onboarding, and flexibility that fits your business. Both options give you 24/7 access to STORM’s incident response team and the ability to use your investment proactively.

Select an option below:

On-demand response, with optional proactive upgrades

CyberCare Standard is designed to provide smaller organisations with affordable access to world-class incident response.

It includes a welcome pack, 24/7 hotline access, and a flexible unit-based model that allows you to scale response or invest in proactive services when needed.

Welcome Pack

Comprising a compendium of useful Cyber Incident Response materials including a CCE guide, checklists and playbooks for common incidents and first responder lanyards.

24/7 Incident Response Hotline

Incident hotline manned 24x7x365; details provided to authorised staff. Alternative secure communications (email and/or chat) is provided if communications systems are suspected to be compromised.

Optional add-ons

Optional paid services, include OpSec Training, CIR Plan Reviews, Cyber Risk Assessments, Attack Surface Scanning, and Board-Level Briefings—strengthening organisational readiness and fortifying defences against threats.

Response and flexibility

With CyberCare Standard, smaller organisations gain the confidence of having top-tier incident response expertise on call, while also having the option to gradually enhance their resilience with tailored services.

This flexible approach allows your organisation to strengthen its cyber defences at its own pace, ensuring that you are protected both today and as your business grows.

How it works

Fully prepared to respond - before a breach occurs

CyberCare Enterprise is our premium retainer for organisations needing full-spectrum cyber readiness.

It includes a structured onboarding process with CIR Assimilation, IR plan review, and key assessments - ensuring both our teams are aligned before a breach occurs. It’s ideal for organisations seeking confidence, clarity, and coordination from day one.

Welcome pack

Comprising a compendium of useful Cyber Incident Response materials including a CCE guide, checklists and playbooks for common incidents and first responder lanyards.

24/7 Incident response hotline

Incident hotline manned 24x7x365; details provided to authorised staff. Alternative secure communications (email and/or chat) is provided if communications systems are suspected to be compromised.

Board-level briefing & strategic assessment

One of our CIR experts will present the current state of cyber risk and explaining the best strategies to manage it effectively. We will also provide a complimentary voucher for a CyberSeven board-level assessment.

CIR Assimilation

Our CIR experts will undertake a rapid learning of technical & organisational controls to assist in optimised response.

CIR Plan review

A review of existing CIR policy, plans and playbooks and recommend improvements. We have an extensive library of CIR templates to assist businesses in developing rigorous and effective response capability.

Cyber risk assessment

Our highly-experienced risk assessment team will deliver our Cyber3: Rapid Risk Review, a comprehensive analysis of your exposures with practical recommendations for remediation.

Attack Surface Scanning

We will provide advanced attack surface analysis scanning of businesses external digital estate. We can also apply this analysis to 3rd party vendors upon request.

Cyber incident exercising

Our CIE team will deliver a tailored tabletop drill using a realistic, business-aligned scenario to test response to an incident. Post-CIE reporting will make recommendations for improvement.

Governance framework templates

As former Chief Information Security Officers (CISO) our team has formulated a comprehensive framework, standards-based set of policies and standards that can be easily tailored for our clients.

Comprehensive Resilience and Readiness

Through this strategic onboarding, CyberCare Enterprise ensures that your organisation has a well-defined and exercised cyber incident response plan, optimised recovery times, and a clear governance structure.

By establishing these critical elements in advance, your organisation and the STORM CyberCare team are fully aligned and ready to respond to any incident with minimal risk and maximum efficiency. CyberCare Enterprise prepares your business not just to react, but to thrive in a dynamic and evolving cyber landscape.

How it works

Service	Standard	Enterprise
Welcome Pack	Yes	`Yes`
24/7 Hotline Access	Yes	Yes
Incident Response Units	Yes	Yes
CIR Assimilation	Optional Add-on	Yes
CIR Plan Review	Optional Add-on	Yes
Cyber Incident Exercises (CIE)	Optional Add-on	Yes
Information Governance Frameworks	Optional Add-on	Yes
CyberDiscover / Attack Surface Scanning	Optional Add-on	Yes
Staff Awareness Campaigns	Optional Add-on	Yes