Triage, containment, forensics and a hardening plan — on retainer, or on demand when something's already wrong.
The basics below — everything else is worked out together in the free scoping call.