Incident Response Retainer Services Australia
An incident response retainer is a pre-arranged agreement that gives your organisation guaranteed access to CREST-certified cyber incident responders before a breach occurs. Retainers include pre-agreed commercial terms, a 24/7 hotline, priority response SLAs, and proactive services including tabletop exercises and IR plan reviews
Before a Breach vs During a Breach
A retainer with Intrix covers two phases: proactive preparation before an incident, and expert-led response when one occurs.
Before a Breach
Your retainer includes:
Dedicated incident response hotline (24/7/365)
Pre-agreed commercial terms — no emergency pricing surcharges
Onboarding workshop to understand your environment, crown jewels, and key contacts
Incident response plan review and tabletop exercise
Quarterly threat intelligence briefings
Priority scheduling — you jump the queue when incidents occur
Pre-positioned tooling and access credentials (optional)
During a Breach
What happens when you call:
Call the dedicated hotline — 4-hour triage response guarantee
Unlimited triage advice during the initial assessment
Rapid deployment of forensic analysts (remote or onsite)
Containment, eradication, and recovery support
Evidence preservation for law enforcement or insurance claims
Executive and board communication support
Post-incident review and lessons learned
Meeting Australian Incident Response Obligations
Australian organisations face mandatory incident response obligations under the Privacy Act 1988 NDB scheme, the Security of Critical Infrastructure Act 2018, and APRA CPS 234 for financial institutions. These frameworks require rapid breach notification, documented response procedures, and evidence of tested incident response capability. An Intrix retainer provides the pre-agreed SLA, tested playbooks, and CREST-certified expert access needed to satisfy these requirements. The Australian Cyber Security Centre recommends having a response partner engaged before an incident occurs.
Retainer Tiers
Feature
Essential
Professional
Enterprise
24/7 Hotline
Yes
Yes
Yes
Triage Response SLA
4 hours
4 hours
4 hours
Onboarding Workshop
Yes
Yes
Yes
IR Plan Review
Annual
Bi-annual
Quarterly
Tabletop Exercise
—
Annual
Bi-annual
Threat Intel Briefing
—
Quarterly
Monthly
Retainer Hours Included
8 hrs/year
24 hrs/year
48 hrs/year
Discounted Hourly Rate
10% off
15% off
20% off
Contact us for pricing. Retainers are tailored to your organisation’s size and risk profile.
Frequently Asked Questions
What happens if we don't use our retainer hours?
Unused retainer hours can be applied to proactive services including penetration testing, tabletop exercises, or security assessments. Your investment never goes to waste.
What types of incidents do you respond to?
We respond to a wide range of cybersecurity incidents, including ransomware attacks, data breaches, phishing campaigns, malware infections, insider threats, and compromised systems. Our team works quickly to investigate, contain the threat, and help restore your systems while minimizing business disruption.
Can you help with cyber insurance claims?
Yes, we can assist with cyber insurance claims. Our team provides the necessary incident documentation, forensic analysis, and technical reports required by insurance providers. We also coordinate with insurers to ensure the claims process is smooth and efficient.
Do we need a retainer if we have an internal security team?
Even if you have an internal security team, a retainer can provide valuable additional support. It gives your team access to specialized incident response experts, advanced forensic capabilities, and extra resources during high-impact incidents when rapid response and deep expertise are critical.
How quickly can we set up a retainer?
Setting up a retainer is typically quick and straightforward. Once the agreement is finalized, onboarding can often be completed within a few days, ensuring your organization has immediate access to our incident response team whenever an emergency arises.
Be Prepared Before It Happens
Set up an incident response retainer with Intrix. Call 1300 931 727.