Without an incident contract, your firm may wait for cyber help
In brief
According to NBC News, officials at Mandiant (a Google unit), CrowdStrike and Kroll say large US cybersecurity firms are now refusing new clients who seek emergency help. They attribute the surge to AI tools that speed up and simplify attacks, while restoring a hacked organisation remains slow and labour-intensive. Incident volume has risen every month this year, and they do not expect the pace to ease soon.
What it changes for an SME
For an SME with 10 to 250 employees, the concrete change is risk and recovery time, not an immediate new bill. CrowdStrike says that in a crisis, response resources go first to organisations that already have an incident-response contract, while those without one wait their turn. Mandiant says incident specialists are now turning down most company requests, and that this is an industry-wide problem. An attack may therefore last longer and cost more, especially as, according to the same firms, AI is speeding up criminal operations and letting less experienced attackers target a large number of organisations.
What you can do
- Check now whether you have an incident-response contract and what it actually covers.
- Ask your insurer and IT provider who would respond to an attack, and whether they still take new clients.
- Make sure critical backups can be restored without relying on an already overloaded external team.
Let's talk about the time you could save.
In 20 minutes, we find where AI could save you time or money. Free, no commitment.