what do these engagements focus on?
The primary focus here is to create plans and policies surrounding incident response, business continuity, and disaster recovery.
Most small to mid-sized businesses do not have any of these plans in place. So, when an unfortunate incident should happen (data theft, natural disaster, technology failure etc.) there has been no preparation around how to respond to and recover from that incident.
This alleviates the old saying, “If it’s not written down it won’t happen.”