Sophos Unveils Cutting-Edge Incident Response Retainer Amid Escalating Cyber Threats

Sophos introduces the Sophos Incident Response Retainer, providing organizations with rapid access to fixed-cost incident response services and 45 days of 24/7 Managed Detection and Response (MDR). This service aims to address the shrinking adversary dwell time in the evolving cybersecurity landscape.


5 September 2023 – Sophos, the globally recognized leader in cybersecurity solutions, has introduced the groundbreaking Sophos Incident Response Retainer to fortify organizations against the rising tide of cyber threats.

Sophos, renowned for pioneering cybersecurity innovations, continues to lead the charge with its latest offering—the Sophos Incident Response Retainer. This cutting-edge service provides organizations with swift access to a fixed-cost incident response solution, coupled with an extensive 45-day 24/7 Managed Detection and Response (MDR) package. By simplifying the process, the retainer enables Sophos incident responders to promptly engage in active cyberattack investigations and remediation efforts.

As the cybersecurity landscape evolves at an unprecedented pace, reducing adversary dwell time is paramount. The 2023 Active Adversary Report for Tech Leaders, published by Sophos, underscores the urgency of timely detection and mitigation. Adversary dwell time has shrunk from 10 days in 2022 to a mere eight days in the first half of 2023, with ransomware attacks showing an even more dramatic drop from nine days to just five. Notably, adversaries tend to strike during nighttime and weekend hours, with only 9.6% of ransomware incidents occurring during business hours.

Rob Harrison, Vice President of Product Management at Sophos, stresses the necessity of pre-established incident response plans in the face of evolving cyber threats. Harrison states, “Tangible ‘readiness’ is now a key component for cyber resilience. Sophos’ goal is to immediately stop active attacks and ensure complete remediation, regardless of the hours required. We are the only security vendor offering this caliber of retainer services for urgent security incidents.”

Chris Kissel, Research Vice President at IDC, highlights the dire need for an experienced incident response team, emphasizing that “Dealing with unexpected cyberattacks is time-sensitive, stressful, and a significant financial commitment.”

The Sophos Incident Response Retainer is available in three tiers through Sophos partners worldwide. This service is accessible not only to existing Sophos customers but also to organizations employing various security products. For current Sophos customers, the retainer includes endpoint configuration health checks and device audits. Additionally, organizations seeking comprehensive incident response services can opt for Sophos MDR Complete, an all-inclusive package that incorporates full-scale incident response.

Sophos partners are enthusiastic about the retainer’s potential to proactively enhance cybersecurity defenses and respond swiftly to worst-case attack scenarios, ensuring every minute counts in safeguarding critical assets.

Author: Terry KS

Share This Post On