Initial incident triage
Incident question and ownership inventory
- Incident question and ownership inventory
- General preservation considerations
- Written investigation scope and go/no-go questions
- Applications
- 1
- Artifacts
- 5
- Total artifact volume
- 50 MB
- Engineering time
- 2 hours
- Counsel time*
- 1 hours
- Review rounds
- 1
- Scheduled meetings
- 1
*Subject to verified qualified counsel and appropriate engagement terms. Allowances are pooled across the stated applications.
Proposed one scheduled scoping meeting in agreed business hours; no emergency response.
No binary comparison or legal merits opinion
Court proceedings, litigation, and expert testimony
Outside experts and third-party collection costs
Work beyond the written scope or agreed capacity