NCC Group has been recognised among notable vendors in Forrester's Cybersecurity Incident Response Services Landscape, Q3 2026. The report examines the cyber incident response services market. Organisations are increasingly looking for partners that can help them prepare for disruption, respond effectively to incidents and restore operations following cyber attacks.
What is changing in the cyber incident response market?
According to Forrester, incident response is evolving beyond traditional digital forensics and containment activities. Organisations increasingly require support across the full incident lifecycle, including preparation, response, recovery and resilience. Demand is growing for providers that can responsibly incorporate AI-assisted analysis while maintaining human oversight, evidential integrity and defensible outcomes.
What trends does NCC Group see shaping incident response?
When responding to Forrester’s survey preceding the publication of the Landscape report, NCC Group highlighted three key industry trends we considered relevant:
- The rise of AI and autonomous agents as a new security frontier, requiring incident response teams to adapt their skills, playbooks and investigative approaches.
- A shift from detection-focused services towards integrated, outcome-driven response that helps organisations recover and build resilience.
- Increasing operational complexity caused by fragmented technology estates, cloud environments, OT systems and interconnected supply chains.
These are challenges NCC Group is seeing across client environments globally.
Which sectors does NCC Group support?
Forrester’s report notes NCC Group's industry focus across:
- Government and public sector
- Financial services and insurance
- Education
NCC Group's incident response teams regularly support organisations operating in critical and highly regulated environments where cyber incidents can have significant operational and societal impact.
How does NCC Group help organisations respond to cyber incidents?
NCC Group provides incident response, cyber resilience, threat intelligence and recovery services to organisations worldwide.
Recent examples include:
- Supporting three London councils following a cyber incident and helping restore critical services.
- Delivering incident response services for a FTSE 100 organisation managing a significant cyber security event.
These engagements reflect the growing need for organisations to have access to experienced incident responders capable of supporting both technical investigations and broader business recovery efforts.
Matt Hull comments
Matt Hull, VP, Cyber Intelligence and Response at NCC Group, said:
"What resonated most with us is that incident response is no longer just about digital forensics. Organisations increasingly need partners who can help them prepare for disruption, respond, recover and build resilience. As AI becomes a growing factor in both cyber attacks and investigations, trusted expertise and human judgement remain critical to achieving the right outcomes for clients."
Forrester does not endorse any company, product, brand, or service included in its research publications and does not advise any person to select the products or services of any company or brand based on the ratings included in such publications. Information is based on the best available resources. Opinions reflect judgment at the time and are subject to change. This report is part of a broader collection of Forrester resources, including interactive models, frameworks, tools, data, and access to analyst guidance. For more information, read about Forrester’s objectivity here.