What changes the effort
- Number of affected AI services and connected systems
- Access to useful traces, versions and provider records
- Ongoing operational impact and required coordination
- Containment and recovery work authorised
- Reporting audiences and follow-up validation
Compare the actual response capability
Ask who will perform the work, which systems they can investigate, what evidence they require and what limitations apply. Confirm hours, mobilisation expectations, fees and subcontractor arrangements in writing.
Send a concise request
Use the incident brief to organise non-sensitive facts. Attach an NDA or procurement document if needed. Do not attach incident logs, credentials or customer data to the public form.
Specify the service rather than a slogan
An RFP should distinguish live response, historical investigation, recovery validation, readiness exercises and retained availability. Identify who can commission work and any insurer or counsel requirements. Ask the supplier to state its access dependencies, exclusions and reporting outputs.
Prepare the comparison
The contact form accepts an NDA or RFP. It is not the channel for detailed incident records. We agree secure handling and permissions before evidence collection.
