Mandiant Managed Defense vs. Secureworks Security Consulting Services

Managed Defense is a must-have for any organization with limited cybersecurity resources and staff. In Managed Defense you have some of the best threat analyst and incident responders in the world to augment your security capabilities 24/7. It is hard to quantify the value of that piece of mind for a small/medium business.

Incentivized

Suitable for Enterprises where IT processes are always evolving and new technology or upgrading current technology is always on the roadmap. They assessed risk and built competitive security programs with personalized solutions and industry-specific standards. Identifying the current state of affairs and designing a target state based on expert guidance. Probably not suitable for small businesses where IT security is either outsourced or not a strategic roadmap.

Incentivized

• Integration & Protection-Mandiant provide highest degree of integration with Endpoints, Networks ,email & Cloud and Identity solutions an organization already using
• Strong Protection- Mandiant has best threat landscape technology which provide holistic view of security & Protection.

Incentivized

• Security Knowledge.
• Training.
• Expertise in the pre-sales area.

Incentivized

• Very little opportunities for improvement. Perhaps support for more alert types. Currently, not all alerts reviewed by the in-house CSOC team are in-scope for Managed Defense.

• Streamlining business process flows.
• Faster correspondence.

Incentivized

We are a quiet shop with few incidents, however, MD's response to questions and access to our assigned MD consultant is excellent.

Incentivized

Mandiant MDR includes authorized hands on keyboard response , The defendor experts for Hunting services does not include managed response, only hunting detection and alerting. Unlike Mandiant ,\Microsoft will not offer detection and response based on third party product data. Nor does Microsoft have the capability to add Network detection & response for analyzing both clear and encrypted network traffic.

Incentivized

ArticWolf was looked at. They seem to have a good track record, but not nearly the depth of skills that Secureworks Security Consulting Services has.

Incentivized

• 24/7 coverage has been huge - that ROI has allowed the company to refrain from additional internal staffing of CSOC resources.
• There is a significant improvement in time to remediate and recover from incidents.
• Managed Defense has the ability to perform threat hunt exercises and perform enterprise-wide forensics beyond the capabilities of in-house CSOC resources.