BreachRx

BreachRx provides the Rex Platform for cyber incident response management, covering incident response exercises, Cyber RegScout for regulatory research, mobile command and integrations, aimed at making an organisation ready to respond rather than only to detect.

Regulatory research is the capability that addresses the genuinely hard part of a breach. Once personal data is compromised, notification obligations arrive from every jurisdiction whose residents are affected, each with its own deadline, threshold and required content, and some measured in as few as seventy two hours. Working out which apply, to whom and by when is a legal exercise nobody can complete quickly under pressure at two in the morning.

Automating that research changes the shape of the response. Instead of instructing outside counsel and waiting, the team sees the obligations immediately and can begin preparing notifications while the incident is still being contained.

Practising before the event is the other half. An incident response plan nobody has exercised is a document, not a capability, and the first time an organisation discovers who has authority to notify a regulator should not be during the incident. The mobile command capability reflects that incidents rarely begin during office hours.