Protect safety
If there is an immediate threat to life or physical safety, call emergency services on 000.
Incident response · On-call 24/7
When every second matters, we can help
For rapid containment and recovery support, call us now. Avoid including passwords, access keys, classified information or highly sensitive incident evidence in this form.
Call 1300 416 260The first hour
Protect people, evidence and critical operations
Activate leadership
Notify the authorised incident lead and preserve a clear decision and communication channel.
Preserve evidence
Record times and observed behaviour. Avoid wiping, rebuilding or powering down systems unless safety requires it.
Contain carefully
Isolate affected services only where authorised and operational consequences are understood.
How we respond
From initial triage to lessons learned
- Detect and triageConfirm scope, impact, urgency and immediate decision requirements.
- ContainLimit harm while preserving evidence and critical business operations.
- Investigate and eradicateEstablish cause, remove attacker access and address persistence.
- RecoverRestore services safely, monitor closely and validate the environment.
- ImproveCapture lessons, reporting obligations and the control uplift required.
Request assistance
Give us the essential details
A senior practitioner will respond as soon as possible. Tell us when the incident was detected, the affected business service and whether operations are continuing.
Share safely
Provide a brief business-level summary only. Do not submit passwords, access keys, classified material, personal records, logs or sensitive evidence. Our team will arrange a protected transfer channel.