Managed Security Operations Centre (SOC)

What do you get?

24x7 Monitoring, Response and Support: Our SOC is staffed 24/7, ensuring continuous monitoring and quick response to any security incidents.
Annual Incident Exercise: An incident response simulation exercise is run annually for each SOC customer by one of our vCISOs – at no extra charge.
Expertise and Research: Our experts contribute to research and industry discoveries that are shared globally.
Visibility: Customers get access to the same systems and views that our analysts use. No more throwing tickets over the fence.
Monthly Security Workshops: Review of past events and identify opportunities for improving security posture. Detailed reporting is provided for IT and management.
Annual Scope Validation: Customer environment reviews to ensure there are no gaps or blindspots of SOC coverage.
Entirely OPEX: No large CAPEX or investments in technology.
Proactive Threat Hunting: Our analysts are proactively threat hunting within your environment, around the clock, discovering malicious activity early.
Security and Compliance: All event data is immutable. The technology stack is certified to multiple standards including ISO 27001, SOC 2 Type 2, PCI DSS, HIPAA and FedRAMP, trusted by brands such as Allianz, Levi’s, Visa, Australia Post, Salesforce, AirBnB, Samsung, Telstra, Toyota, Twitter, Xero. Data sovereignty is ensured and customer data never leaves Australia.

The Security Centric SOC is trusted by ASX200, Australian Government and corporate customers, currently operating for organisations with 100 to 6,000 users.

Why Security Centric SOC

Fit: Security Centric is large enough to have broad and deep capability and resourcing, yet small enough to be flexible and get to know each of our SOC clients.

Full Lifecycle: Security Centric operated across the full security lifecycle of assess-secure-maintain-respond, ensuring we’re preventing breaches before they get to being a SOC incident response.

Our GRC, Technical Assurance, Security Engineering and SOC teams work alongside each other, improving each team’s capability, and also customer outcomes across the entire security lifecycle.

MDR 20220928m

Inclusions

What do you get? Everything needed for a turnkey continuous coverage managed security operations centre:

Managed Detection and Response (MDR)
Security Information and Event Management (SIEM)
Security Orchestration, Automation, and Response (SOAR)
Best-of-Breed Cloud-Native Technology Stack (Gartner top right quadrant) hosted in AWS Sydney
300+ playbooks based on best practices, customisable as required
Threat hunting included
Incident response management included
Active containment actions 24x7 in addition to notification and escalation (as authorised)
Annual desktop incident response simulation exercises (including IT + management) run by a vCISO
12 month data retention
All software, hardware, storage, etc
Monthly security event review workshops and detailed reporting
Proactive identification of security concerns before they end up as a breach
Digital war room for incident coordination
Native communications integration – Teams or Slack chat straight to our analysts
Cloud, on-premise and bespoke application monitoring support
Reach-back to our engineering team to close potential entry points

How it Works

Rapid Time-to-Value

Time-to-value sounding like a buzzword? We mean time for our SOC to actually start working to keep you covered. We've done it in days, but typically it's a few weeks.

Onboarding workshop to identify internal and external systems
Install collectors for on-premise equipment
Connect cloud-to-cloud event collection
Confirm communications and escalation contacts
Confirm criteria where we have authority to step in and take containment actions (e.g. disabling devices or accounts)
Enter operational state, monitoring 24x7

How we stack up

Comparing apple with apples

	Market Offering
Sydney-based SOC	Offshore SOC
All customer data remains in Australia	Customer data offshore
All costs included	Retainer required
Incident support is unlimited	Incident support consumes retainer credits
Complementary services available (PT, GRC, Engineering, vCISO)	Either SOC-only or generalist IT
On-call communication - Phone, text, chat, email	Ticket system is processed and sent overseas
Partnership - Mentoring, trust and shared goals	It's a tool not a partnership
Cyber security outcomes are our priority	Reselling products is their priority
Our SOC is 10 years in operation	SOC is new to the market
Threat hunting conducted by humans	Threat hunting automated
Monthly workshops led by your SOC Manager	Auto generated report

Managed Security Operations Centre (SOC)