Protective Monitoring

Engagement scope

​

• DevOps organisation

• SIEM/ Monitoring Tooling

• SOC Gap Analysis

• Incident Response gap analysis

• Business ecosystem assessment

• Hosting, Network, Applications & User End Points

• Operational Monitoring & Dashboards

• Attack Surface Analysis capability - inputs to monitoring

• Cyber Threat Intelligence capability - inputs to monitoring

• Vulnerability, Threat & Risk Management capability- IoC/ Use case

• SIEM Capability- SaaS, in-house or outsource

• Security Assurance (and change) process - for use case inputs to monitoring

• Architecture, SW Engineering and DevOps engagement

• Service Management Processes

• BCP / Disaster Recover processes

• Incident Response Process & Tooling