Government
Cyber Incident Mirror
Cyber incident, captured the moment it happened.
Detection time, classification, containment steps, notification timestamps — signed in the moment, defensible in the inquiry.
The pain
A municipal IT system goes down at 02:14. By morning the IT team is patching; by Friday the incident is "resolved"; the following month the Israeli Cyber Defence Directorate asks for the timeline and you assemble it from Slack screenshots and three different ticket systems.
The solution
Cyber Incident Mirror captures detection, classification, containment, and notification timestamps in the moment. By the time the directorate calls, the report is already a verified chain.
How it works
4-step flow from intake to audit.
- Step 1
Detection signed
First-detection event signed with detector identity, indicator, and severity.
- Step 2
Classification + containment
Each step signed by the analyst-of-record; containment binds to the matching IOC.
- Step 3
Notification logged
Notifications to INCD / DPO / mayor signed at the moment they're sent.
- Step 4
Post-incident review
Lessons-learned signed by the incident commander; archive ready for the next audit.
What’s included
Contract surface and the engineering you don’t have to build.
- Up to 5,000 incident events / month
- INCD reporting format pre-built
- Analyst-of-record signature on every step
- Severity + classification taxonomy (Israeli + NIS2)
- Bilingual SOC interface
Legal basis
The regulations this product is built to satisfy. Each obligation maps to a signed contract event you can hand a regulator.
- Israeli Cyber Defence Directorate (INCD) reporting rules
- Significant cyber events to INCD within statutory windows; signed timeline required.
- EU NIS2 Directive
- 24h early warning, 72h incident notification, 1-month final report.
- Israel Freedom of Information Law (1998)
- Public bodies must respond to information requests within 30 calendar days, with statutory escalation rights when they don't.
- Public Complaints Commissioner Law (2008)
- Local authorities must accept, register, and answer citizen complaints under a documented process.
- State Comptroller — annual municipal-audit provisions
- Comptroller's office may demand the chain of evidence behind any decision; production is signed, dated, and complete or it isn't.
Pricing
USD 1,500/month per municipality.
Need a multi-site federation, a custom export schema, or a regulated-deployment partner? Email sales@growingintelligence.ai.
Sign your first event in 30 seconds.
The wizard pre-loads Cyber Incident Mirror; you fill in your scope and sign. No credit card. No salesperson.