Cybersecurity Incident Response

CRA assists companies and their counsel in independently investigating and responding to complex cybercrime and data breach incidents. We have worked on thousands of such matters, including many covered by the media. We are noted for deploying cross-trained teams of professionals who are experienced at working under privilege to help clients establish facts and gain deeper insights more quickly. This enables clients to assess exposure and take defensible, corrective action to get back to business as usual.

Our professionals include information security experts, incident responders, former IT auditors, former law enforcement officers, eDiscovery professionals, and computer forensics experts with deep technical and analytical skills, and decades of investigative and cybersecurity experience. We bring a pragmatic and practical approach to addressing threats and incidents to limit disruption.

Our focus areas


  • 01
    Case solved: Electronic sabotage by former employee
    Our CRA Forensic Services team investigated and determined that a former executive, whose access rights and credentials had not been revoked, was responsible...
    View engagement
  • 02
    Assisting a large public research Canadian university with imminent threat from ransomware group
    Issue: A large public research Canadian university with over 10,000 students faced an imminent threat from the ransomware group Cl0p, as alerted by the...
    View engagement
  • 03
    Cybersecurity incident response
    Ransom request of data associated with a Fortune 500 client.
    View engagement

Subscribe to receive our latest Insights.