Services
Help setting up the process, when you want it done with you.
The products do the work. These services exist for the part that is easier with someone who has done it before: deciding what your process should be, and being reachable when an incident is live.
Three steps, taken in this order.
- Step 1
NIS2 and DORA readiness assessment
A free first call, then a short engagement that compares what you do today with what the rules expect, and ranks the gaps by what breaks first in an incident.
Request the assessment- Scope check: which rules apply to you and why
- Gap analysis against the NIS2 and DORA requirements that apply
- Prioritised remediation plan with effort estimates
- A one-hour briefing for the people who own the risk
- Step 2
Process design and rollout in Resolvo
The step most teams skip. We write the process with you, then build it in Resolvo while you watch, so your team owns it instead of renting it.
Talk about your process- Stages, gates and roles written down and agreed with your team
- The process built in Resolvo, with intake questions and severities
- A dry run on a real incident before anything goes live
- Handover session so your team can change the rules itself
- Step 3
Incident-response retainer
Support arranged before the incident, with scope and response times agreed in the contract rather than negotiated at three in the morning.
Discuss a retainer- Named contacts and an escalation path that is agreed in writing
- Support during an incident, alongside your team
- Help preparing NIS2 and DORA notifications for your review
- A post-incident review and a management report
Security monitoring is available on request. What is monitored, the coverage hours and the response times are agreed in writing before any work starts.
What the software does, and what we do
Resolvo runs the process, keeps the timeline and produces the records. It does not decide your risk appetite, sit in your incident calls or sign your notifications. Those stay with people, either your team or ours.
- Delivered by the software: rooms, stages, gates, reminders, timeline, evidence custody, reports.
- Delivered by people: the design of the process, the readiness verdict and the response during an incident.
- Delivered by neither: legal advice. Notification texts go to your counsel for review.
Penetration testing
Testing is a separate engagement with its own scope and rules of engagement.