Cybersecurity Incident Response

CRA assists companies and their counsel in independently investigating and responding to complex cybercrime and data breach incidents. We have worked on thousands of such matters, including many covered by the media. We are noted for deploying cross-trained teams of professionals who are experienced at working under privilege to help clients establish facts and gain deeper insights more quickly. This enables clients to assess exposure and take defensible, corrective action to get back to business as usual.

Our professionals include information security experts, incident responders, former IT auditors, former law enforcement officers, eDiscovery professionals, and computer forensics experts with deep technical and analytical skills, and decades of investigative and cybersecurity experience. We bring a pragmatic and practical approach to addressing threats and incidents to limit disruption.

Our focus areas


  • 01
    Transformed endpoint visibility and cyber threat management program for multinational financial services company
    Following a severe ransomware attack that resulted in an extended business shutdown, a private equity-backed multinational financial services company urgently
    View engagement
  • 02
    Case solved: Electronic sabotage by former employee
    Our CRA Forensic Services team investigated and determined that a former executive, whose access rights and credentials had not been revoked, was responsible...
    View engagement
  • 03
    Assisting a large public research Canadian university with imminent threat from ransomware group
    Issue: A large public research Canadian university with over 10,000 students faced an imminent threat from the ransomware group Cl0p, as alerted by the...
    View engagement

Subscribe to receive our latest Insights.