How do I choose an MDR provider for a small company?

Choose on what happens at 03:00, in writing, not on the brochure. Ask each provider five things. What exactly do you do when you see an attack: call us, isolate the machine, reset accounts, or only open a ticket? What is the response time you commit to in the contract, and how is it measured? Which sensors are included: endpoint only, or also network, e-mail, identity and cloud? Where are our data and your analysts located, and which sub-processors do you use? What do we keep if we leave? Ask for a sample incident report and a reference customer of your size. Check that the price model fits you: per endpoint, per user or per site. A network sensor can sit beside an MDRMDR: managed detection and response. A service in which an outside team watches your alerts and responds for you. service: NetSenX alerts can go by e-mail on every plan, by Slack or webhook from the Pro plan and to a SIEMSIEM: security information and event management. A system that collects logs from many systems and looks for patterns across them. from the Business plan, so a provider can receive them.

← All 40 questions on NDR, EDR, SIEM, XDR, MDRAll topics