How to Contact ISA Cybersecurity in Case of a Breach or Cyber Incident

Updated

If you are experiencing a breach or an active cyber incident, ISA Cybersecurity lists a dedicated incident hotline: 1 877 591 6711, extension #4. The same page also offers a "Speak With an Expert" option for reaching their team. ISA describes its incident response support as available 24x7x365, so the hotline is intended for use at any hour, not just during business hours.

The two contact routes on the site

Route How to use it When it fits
Incident hotline Call 1 877 591 6711 #4 You are in or suspect an active breach or cyber incident and need immediate response
"Speak With an Expert" Use the button on the ISA Cybersecurity site You want to talk to someone before an incident, or your situation is not urgent

The hotline is the only contact detail the site presents specifically for breach and incident situations, which is why it is the first thing to use when something is already happening.

What happens after you make contact

ISA's Respond 360 services cover Incident Readiness, Incident Response and Recovery, and Digital Forensics. The site states that its experts act as an extension of your team to contain the attack, limit damage, and accelerate recovery, and that they are available 24x7x365 in the event of a breach. In practice, that means the first call is about triage and containment rather than a general sales conversation.

Before you call, have these ready

You do not need a complete picture to make the call, but the following speeds things up:

  • What you observed (e.g., ransomware note, unusual logins, data exfiltration alert) and when it started
  • Which systems, accounts, or data appear affected
  • Whether the incident is still ongoing or already contained
  • Who on your side is the decision-maker for containment and recovery
  • Any internal or regulatory reporting deadlines you are already aware of

If you are not yet in an incident

The "Speak With an Expert" route is the better fit for readiness work — for example, building an incident response plan, running tabletop exercises, or setting up managed detection and response before anything goes wrong. ISA's broader Cyber 360 framework spans Assure 360, Govern 360, Detect 360, Respond 360, and Protect 360, so a non-urgent conversation can start anywhere in that range.

Common points of confusion

  • The extension matters. The listed number is 1 877 591 6711 #4; the site presents it as the incident line, not a general switchboard.
  • The hotline is for incidents, not general inquiries. Using it for non-urgent questions may slow down response for organizations that are actually breached.
  • 24x7x365 refers to incident response support, as described on the site — it is not a statement about every other service's availability.
  • Contacting ISA does not replace your own obligations. Regulatory notification, legal, and privacy duties remain with your organization; ISA's role as described is containment, response, recovery, and forensics.

For anything beyond the phone number and the expert-contact option, the ISA Cybersecurity site is the authoritative source, since service scope and contact details can change.