For Insured Companies

You Have Cyber Insurance. We Handle the Breach.

Most cyber policies cover 100% of our incident response and forensic investigation fees.

Sherlock Forensics provides breach response for organizations with cyber insurance. Most policies cover the full cost of incident response, forensic investigation, breach notification support and remediation guidance. Our court-qualified examiners coordinate directly with your insurer so you can focus on your business while we handle containment, evidence collection and reporting. Call 604.229.1994 for immediate response.

You pay for cyber insurance so that when something goes wrong, experts handle the response. That is exactly what we do. We work directly with your carrier, produce the reports they need for the claims file and make sure your organization gets through the breach with minimal disruption and maximum coverage.

100%
Covered by most policies
24/7
Incident hotline
20+
Years experience

How It Works

From Breach to Resolution

Step 1

Call Your Insurer

Contact your cyber insurance carrier's claims hotline. Report the incident and tell them you want Sherlock Forensics as your forensic investigation vendor. Your policy has a claims number you will need.

Step 2

Request Sherlock Forensics

Ask your carrier to approve Sherlock Forensics for the engagement. If we are already on their panel, this is immediate. If not, most carriers approve us within hours based on our qualifications and certifications.

Step 3

We Begin Response

Once approved, we begin immediately. Remote triage starts within hours. We contain the threat, preserve evidence and begin the forensic investigation while coordinating with your carrier and legal counsel.

Step 4

Forensic Report

We produce a comprehensive forensic report documenting the attack timeline, scope of compromise, affected data, root cause and remediation actions. This report is formatted for your claims file and regulatory submissions.

Step 5

Claims Support

We support the claims process by providing supplementary documentation, answering adjuster questions and, if needed, providing expert testimony. Our goal is to ensure your claim is processed smoothly and your coverage is maximized.

Your Policy Covers This

Your premium already paid for this.

Most cyber insurance policies cover the following services at 100% when you use an approved vendor. You are already paying the premium. Use the coverage.

  • Incident response and breach containment
  • Digital forensic investigation and evidence collection
  • Breach notification support for PIPEDA and provincial requirements
  • Expert witness testimony for litigation or regulatory proceedings
  • Remediation guidance and post-incident hardening

Frequently Asked Questions

Insured Company FAQs

Does my cyber insurance cover forensic investigation fees?
Most cyber insurance policies cover 100% of incident response and forensic investigation fees when you use an approved or pre-approved vendor. Even if Sherlock Forensics is not already on your insurer's panel, most carriers will approve us upon request. Call your insurer first, then call us at 604.229.1994.
Can I choose my own forensics vendor or do I have to use my insurer's panel?
Many policies allow you to request a specific vendor, especially if you have an existing relationship or the vendor meets the insurer's qualification requirements. We regularly work with insurers to gain approval for specific engagements. Contact your carrier and request Sherlock Forensics by name.
What should I do first when I discover a breach and have cyber insurance?
Call your insurance carrier's claims hotline immediately. Notify them of the incident and request Sherlock Forensics as your forensic investigation vendor. Then call us at 604.229.1994. We will coordinate directly with your insurer while beginning containment and evidence preservation.
How long does the claims process take after the forensic investigation?
The forensic investigation typically takes 2-4 weeks depending on scope. Our final report is formatted specifically for claims processing and includes all documentation the adjuster needs. Most claims resolve within 30-90 days after the report is delivered.

Active Breach? Call Immediately.

Your cyber insurance covers this. Do not wait. Call now and we will coordinate with your carrier while we begin containment and evidence preservation.

Call 604.229.1994
Incident Hotline
604.229.1994
Availability
24/7/365 - including holidays
Burnaby Office
Burnaby, BC, Canada
Coquitlam Office
Coquitlam, BC, Canada