Northwave CERT Cyber Incident Response is a 24/7 emergency incident response service that supports organizations during and after cyberattacks. The service is delivered by a dedicated incident response team that handles more than 100 serious cyberattacks per year. Key areas of coverage include: **Forensics:** Digital forensic investigation to identify root causes of a breach, uncover evidence, and provide actionable insights. Findings can support legal proceedings if required. **Recovery:** Guided restoration of business operations following a cyber incident, with an emphasis on speed and security. **Negotiations:** Engagement with threat actors on behalf of affected organizations, leveraging experience from daily interactions with adversaries in high-stakes situations such as ransomware events. **Crisis Communications:** Development and execution of tailored communication strategies to manage reputational impact, targeting the right audiences at the right time during a cyber crisis. Upon contact, a triage and situational assessment is provided within 30 minutes. The team is available around the clock and can deploy on-site globally. The service covers the full incident lifecycle, from initial threat containment through to full operational recovery, including employee support and reputation management.