The prevalence of modern cyber attacks has made it essential for organizations to monitor their IT estates 24/7 for signs of an intrusion. To ensure these capabilities are accessible to organizations with limited resources, WithSecure has introduced a new co-monitoring service for its Elements Endpoint Detection and Response (EDR) solution.
Successful detection and response requires specialized technology, the expertise to operate it, and the authority to respond to incidents around-the-clock.
Acquiring these human capabilities can be costly and difficult to justify when weighed against other business considerations. However, WithSecure Vice President of Product Management Leszek Tasiemski says that they provide a crucial edge when dealing with a cyber attack.
“An incident dealt with correctly can be resolved in hours rather than days or months, and one way or the other, that outcome is visible in organizations’ bottom lines,” said Tasiemski. “In practice, getting the best outcome in this scenario means being able to respond quickly to suspicious activity when it’s detected. And attackers aren’t taking evenings, weekends, and holidays off, so you need to ensure things are monitored even during these downtimes.”
WithSecure Co-Monitoring is a continuous, 24/7 monitoring service in which WithSecure cyber security professionals investigate and provide remediation advice related to detections generated by WithSecure Elements EDR.
The service supports Elements EDR customers by:
- Maintaining constant watch over severe risk detections in their IT environments
- Validating and investigating detections to establish if they are true positive incidents that require action to remediate.
- Ensuring that true positive incidents are escalated in a timely fashion to the correct customer representative(s) with the authority and ability to respond.
- Providing advice to the customer representative(s) for containment and remediation of the incident—for example, recommending network isolation of the affected systems or termination of malicious processes
The service is available as an add-on to WithSecure Elements’ EDR: a leading endpoint detection and response solution that gives organizations comprehensive detection coverage and the ability to respond to attacks quickly. It can also be easily expanded to cover seamless escalation to WithSecure’s government-assured Incident Response Retainer services.
WithSecure Elements is a cloud-based security platform that organizations can use to offload security management to a trusted managed service provider, or manage in-house. It provides organizations with flexibility to pick and choose the capabilities they need via different modules, including endpoint protection, endpoint detection and response, vulnerability management, cloud security posture management, and collaboration protection.
More information on WithSecure Co-monitoring is available at: https://www.withsecure.com/en/solutions/software-and-services/co-monitoring
