Incident Response Overview

01 Purpose

Big Bull Technologies, LLC (“Big Bull Technologies,” “BBT,” “we,” “our,” or “us”) is committed to responding promptly and responsibly to security incidents that may affect Before the Call (“B4C”), our Customers, or the Services.

This document provides an overview of how we prepare for, assess, respond to, and recover from security incidents.

It is intended to provide transparency into our incident response philosophy without disclosing confidential operational procedures.

02 Our Approach

Security incidents require timely, organized, and responsible action.

Our incident response process is designed to:

• Protect Customers.
• Protect Customer Data.
• Restore platform availability.
• Investigate the cause of incidents.
• Reduce future risk.
• Improve security practices through continuous learning.

Each incident is evaluated based on its specific circumstances.

03 What Is a Security Incident?

A security incident is any event that may affect the confidentiality, integrity, or availability of Before the Call or Customer information.

Examples may include:

• Unauthorized access attempts
• Compromised user accounts
• Malware or ransomware activity
• Platform vulnerabilities
• Data exposure
• Service disruptions caused by malicious activity
• Credential compromise
• Unauthorized changes to systems or data

Not every technical issue is considered a security incident.

04 Incident Detection

Security events may be identified through:

• Automated monitoring
• Platform alerts
• Customer reports
• Internal testing
• Third-party service providers
• Routine operational reviews

All reported security concerns are evaluated using risk-based priorities.

05 Initial Response

When a potential security incident is identified, Big Bull Technologies works to:

• Assess the reported issue.
• Determine the scope of the event.
• Evaluate potential customer impact.
• Preserve relevant information for investigation.
• Begin appropriate containment measures.

Our first priority is reducing potential risk while gathering accurate information.

06 Investigation

Security incidents are investigated using a structured process appropriate to the nature of the event.

Depending on the circumstances, investigation activities may include:

• Reviewing system logs
• Examining authentication records
• Evaluating affected systems
• Coordinating with infrastructure providers
• Assessing Customer impact
• Confirming the scope of the incident

Investigations continue until sufficient information is available to understand the event and determine appropriate corrective actions.

07 Containment & Remediation

When appropriate, Big Bull Technologies may implement measures such as:

• Restricting affected accounts
• Resetting credentials
• Applying security updates
• Isolating affected systems
• Blocking malicious activity
• Restoring affected services
• Improving security controls

Corrective actions depend on the nature and severity of the incident.

08 Customer Notification

If a security incident materially affects Customer information or otherwise requires notification under applicable law or contractual obligations, Big Bull Technologies will provide notice within a commercially reasonable timeframe after sufficient information has been confirmed.

Notifications may include, when appropriate:

• A description of the incident.
• Known or reasonably suspected impact.
• Actions already taken.
• Recommended Customer actions.
• Available support resources.

09 Recovery

Following containment, we work to restore normal operations safely and responsibly.

Recovery efforts may include:

• Restoring services
• Verifying system integrity
• Monitoring for recurring issues
• Confirming successful remediation
• Communicating status updates when appropriate

Our goal is to restore services while maintaining the integrity of the platform.

10 Post-Incident Review

Following significant incidents, Big Bull Technologies evaluates:

• Root causes
• Effectiveness of the response
• Security improvements
• Process improvements
• Documentation updates
• Customer communication
• Lessons learned

These reviews help strengthen our security program over time.

11 Customer Responsibilities

Customers play an important role in protecting their own environments.

We encourage Customers to:

• Use strong passwords.
• Enable multi-factor authentication when available.
• Review user permissions regularly.
• Remove inactive accounts promptly.
• Report suspected security concerns immediately.
• Notify us of suspected account compromise.

12 Responsible Disclosure

We encourage the responsible reporting of suspected security vulnerabilities.

Individuals who believe they have identified a potential security issue should report it privately to Big Bull Technologies rather than publicly disclosing details before the issue can be investigated.

We appreciate responsible security research conducted in good faith.

13 Continuous Improvement

Every security event provides an opportunity to improve.

Incident response procedures, monitoring capabilities, security controls, documentation, and internal processes are regularly reviewed and refined based on operational experience, evolving threats, and industry best practices.

Continuous improvement is a core principle of our security program.

14 Contact

Suspected security incidents or vulnerabilities should be reported promptly to ashlea@bigbulltech.io.

Questions regarding this Incident Response Overview may also be directed to Big Bull Technologies.

15 Related Documents

• TRU-001 — Security Overview
• TRU-002 — Administrative Intelligence & AI Policy
• TRU-003 — Data Security
• DAT-001 — Data Ownership Policy
• DAT-002 — Data Retention Policy
• LEG-002 — Privacy Policy

16 Revision History