The bank's contingency plan needs to include the names of the firms to use for forensic analysis as well as primary and secondary contacts and after hours phone numbers. Perform a review of these vendors in advance. There isn't time to find or fully evaluate a company when a situation occurs. Trade associations and other technology related service-providers may be a good reference source.