Fortinet’s experts who step in when an alert becomes a real problem, or during an active attack.
Fortinet’s FortiGuard team provides incident response, helping scope, contain and recover from an attack, as well as MDR. Details depend on the service you buy.
In a serious incident, administrators must keep control of the facility while finding out what happened. Outside responders help with the technical side, while staff run the facility.
- Provides experts during an attack.
- Helps determine scope and what happened.
- Supports recovery of operations.
When a county was hit, the jail felt it
In January 2022, ransomware aimed at Bernalillo County, New Mexico, took down most data systems at its Metropolitan Detention Center, cut camera access and briefly disabled automatic doors. Inmates were confined to cells and visits were suspended.
Source: Malwarebytes
- Experts in malware and attacker behavior.
- Scoping and containment.
- Support for recovery and evidence.
| Control | Priority | How this helps |
|---|---|---|
| IR-4Incident Handling | P2* | Adds incident handling capacity. |
| IR-8Incident Response Plan | P2* | Supports your response plan. |
| PS-7External Personnel Security | P2* | Outside staff may fall under external personnel security. |
Line this up before an incident, including how responders will be screened and escorted.
Based on CJIS Security Policy v6.1. This product can support these controls but can’t satisfy them alone. How to read this table