Skip to main content


Cyber Incident Management Services

Cyber incident advisors to help ensure your organisation’s cyber incident response is efficient and effective at every stage.


“Best-for-you” cyber incident management program tailored to your specific issues and pain points.


Dedicated cyber incident management practitioners with years of frontline experience managing a large volume and a variety of cyber incidents.


Continuously offering new ways to efficiently modernize and refresh existing cyber incident plans so they are suitable for the current and evolving threat landscape.

Cyber incidents can have a huge impact on organizations, damaging reputation, incurring significant costs, and preventing critical operations. Being able to quickly respond and mobilize stakeholders helps to limit the impact of an incident and build resilience. Our cyber incident management practitioners are available to work collaboratively with you and provide active support and professional guidance to help align your team’s incident management approach and necessary resources before, during, and/or after an incident.


  • Developing and updating incident response plans.
  • Identifying, vetting, and selecting appropriate incident response vendors.
  • Enhancing ransomware-specific decision-making frameworks.
  • Providing access to a safe and secure virtual cyber incident preparation platform.
  • Facilitating tabletop and training exercises.

During an incident

  • Helping to trigger the cyber insurance policy and coordinating the triage call with appropriate incident response stakeholders.
  • Providing in-the-moment guidance as to the best choice of vendors, factoring in vendor panel requirements, expertise, and capacity.
  • Assisting with securing the necessary carrier approvals of vendor scope of work (SOW) and other required consents throughout the incident response process.
  • Helping to maximize insurance recovery and minimizing coverage disputes under all applicable coverages (cyber, kidnap and ransom, property, and others).


  • Coordinating recovery and remediation services.
  • Incorporating lessons learned into incident response plans.
  • Quantifying proof of loss for business interruption coverage and overall support of financial recovery.


From Incident to Resolution: Managing cyber claims successfully

Check out our webcast about cyber risk trends, cyber incident planning, and how Marsh can help with your cyber insurance program and cyber claims. It’s available on demand.

Cyber Incident Management (CIM) service flyer

Why Marsh

As specialists in enterprise risk and in cyber, we can help you take an enterprise-wide approach in building your cyber resilience. Together, we identify your risks, and work with you to develop a program tailored to your circumstances. We inform your approach and decision-making process with our more than 25 years of cyber experience and data-driven insights. By doing so, your path to cyber resilience can be more productive and predictive and your outcomes more efficient and effective.