CS1907

endpoint detection and response
MANAGING THE COST
The key to obtaining SOC services at the
right price is to have the choice between
alternative suppliers, or MSSPs - managed
security service suppliers. If an EDR solution
does not provide the possibility of this
customer choice for SOC services, then the
element of competition for the services
element may be lost.
Titan Data Solutions is an IT security
distributor with a difference, because it
believes that its key role is to take the hard
work out of sourcing SOC services for EDR.
Titan Data Solutions works with multiple
SOCs and selects the best options, to
supply Titan packaged SOC services via
its partner base to all types of end-user
organisation. These SOC services include
threat monitoring, remote incident
response by SOC experts, and on-site
incident response.
By sourcing and integrating SOC
packaged services with EDR solutions at the
distributor level, and taking responsibility
for them under its own brand, Titan Data
Solutions provides unique added value.
This translates to affordable pricing for
end users.
For resellers, it is easy to sell these
advanced services like other types of
product, and let Titan Data Solutions, with
its SOC provider, implement the standard
service packages. For 'MSPs' - IT managed
service providers - it can be an impossible
challenge to upskill and increase resources
to provide SOC services on a 24/7 basis,
to meet customer requirements. So,
MSPs can also find Titan Data Solutions'
packaged SOC services an invaluable asset,
to enable them to supply a working EDR
with affordable services, increase their
footprint in the customer and increase
customer loyalty.
AN INTEGRATED FUTURE
Titan Data Solutions believes that, as a
distributor, it is in the perfect position to
source and supply these SOC services. Both
MSPs and resellers may fear that, if they
bring in an MSSP with a SOC directly to
provide these services, then the MSSP may
take over their relationship with their enduser
customer. Titan Data Solutions, on the
other hand, is a distributor and is 100%
committed to its relationships with its
partners - it uses carefully selected SOCs to
provide the services under its own brand,
but Titan Data Solutions will be the supplier
of the services.
So, with the emergence of affordable
packaged SOC services, companies of all
sizes can look afresh at the possibility of
implementing an EDR solution that will
function as a monitored alarm with timely
alerts - including a packaged incident
response service, to assist in analysing
and countering any detected threats.
The future direction of EDR will be for
increased integration with other layers of
IT Security defences, such as antivirus, so
that automated responses to suspected
breaches can become more commonplace.
While many triggered responses are already
available, this can only deal with a limited
subset of use cases for the foreseeable
future. The ingenuity and creativity of
human attackers will require the ingenuity
of human defenders for a significant time
yet to come. Nevertheless, the drive for
cost-competitiveness is likely to strengthen
the trend to increased automated response.
DRIVING FORCE
Consequently, any strategy for EDR should
embrace the future requirement for
increased real-time automated incident
response, driven by the EDR system.
This implies that the EDR system which is
selected should be capable of triggering
defensive responses in the antivirus
endpoint threat prevention system and on
other security layers in the network, to
demonstrate that this facility exists and
can be developed further for the future.
Titan Data Solutions addresses this need
by offering the 'Enterprise Inspector' EDR
system from ESET, together with Dynamic
Threat Defence, to its partners and their
end-users. This EDR system works in
concert with the ESET antivirus system for
endpoint threat prevention. Titan Data
Solutions' packaged SOC services are
supplied for this ESET platform. By tuning
the SOC services to this platform, Titan
Data Solutions can ensure the SOC services
have optimum efficiency and affordability.
EDR is a chameleon: either it is a
monitored alarm that can save your
company, or it is a post-event forensics
tool. Affordable packaged SOC services,
that meet your specific requirements, could
make the difference.
With the right strategy, this will be the
gateway to a future of increased
integration and automated response.
34
computing security July/August 2019 @CSMagAndAwards www.computingsecurity.co.uk