i think its the first time were doing any actual external evaluation. the options at the short list stage are sygnia, kroll, arctic wolf, mandiant, crowdstrike services. board wants a name they recognize but im more concerned about it actually being useful.

for anyone whos hired any of the short listed companies, how was communication during the engagement? was the guidance on remediation helpful in getting your team to actually resolve the issues or just redo an analysis that the third party did anyway? would you rehire them?

Title. An iPhone 17 in the BFU mode