Services / Incident response & CIRT/SOC design

Incident Response, CIRT & SOC Design Consultant

Response capability built by someone who has run one. I helped build Bangladesh's first government CIRT, deployed early-warning sensors across critical infrastructure and set up a national cyber helpline.

Discuss your needs

What's included

Incident response plan, roles and escalation paths
Playbooks for ransomware, phishing, data breach and insider threats
Tabletop exercises for executives and technical teams
CIRT/SOC operating model, tooling and SIEM use cases
Post-incident reviews and lessons learned

The outcome

A team that knows what to do in the first hour.

Relevant experience

All projects

2015 – 2020

Bangladesh's first government CIRT

BGD e-GOV CIRT · Norway Registers Development / NRD Bangladesh

Built the country's national government CIRT after the 2016 Bangladesh Bank SWIFT heist.

~95% drop in nationwide cyberattacks
Repeat attacks on banks and government blocked

Incident response
Strategy & policy

Oct 2017 – Jun 2019

Early-warning cyber sensors in critical infrastructure

NRD Bangladesh

Deployed national early-warning sensors across 17 critical infrastructure sites.

17 critical infrastructure sites covered

Incident response

Jun 2020 – Dec 2020

National Cyber Helpline

Bangladesh N-CERT

Set up the national helpline for citizens and organisations to report cyber incidents.

National reporting channel launched

Incident response

2017 – 2020

National digital forensics lab

BGD e-GOV CIRT

Established the national digital forensics laboratory for the government CIRT.

National forensic capability in place

Forensics

Related insights

All articles

November 16, 2025 · 5 min read

When Attacks Think for Themselves: The AI-Augmented Cyber Kill Chain

How AI changes each of the seven phases of the Cyber Kill Chain, from reconnaissance to actions on objectives, and what defenders must do now that security is becoming model versus model.

AI Security
Security Operations

May 27, 2024 · 6 min read

Defend, Detect, Respond: SIEM Strategies for Tackling Cyber Threats

The indicators and log sources a SIEM should use to catch malware, phishing, web application attacks, insider threats and APTs, threat by threat.

Security Operations

October 3, 2016 · 4 min read

Ransomware Facts and Mitigation Tips

What ransomware is, how it gets in, and eleven practical habits that keep individuals and organisations out of the ransom conversation.

Awareness
Security Operations