Cyber Security

Combine prevention, monitoring and response across your business systems.

Enquire about this service
Person monitoring code and system logs on several screens

Coverage across devices, networks and accounts.

Security controls address different parts of the environment. Endpoint protection, network controls, email gateways and privileged access management need to work alongside the people responsible for reviewing alerts and taking action.

EDISON covers prevention, detection, monitoring and response services. A useful starting point is to review what is already deployed, where visibility is missing and who owns the response when suspicious activity is identified.

  • Endpoint, network and extended detection and response (EDR, NDR, XDR)
  • Managed detection and response (MDR) and security monitoring
  • UTM firewalls from Fortinet, Palo Alto Networks and Cisco
  • Email security gateways
  • Privileged account management (PAM) and network access control
  • Fortinet
  • Palo Alto Networks
  • Cisco
  • EDR / NDR / XDR
  • MDR

What do EDR, NDR, XDR and MDR mean?

These terms describe different sources of visibility or a service for handling detections. They are useful to understand before comparing solutions.

Security detection tools and managed services
CapabilityRole in the environment
EDREndpoint detection and response focuses on activity at devices such as workstations and servers. Review the devices covered, operating-system compatibility and the response actions supported by the selected platform.
NDRNetwork detection and response focuses on network activity. It adds a view of traffic and behaviour between systems; the available visibility depends on how and where the solution observes the network.
XDRExtended detection and response connects signals from multiple security sources, potentially including endpoints, networks and email. Check which existing tools can integrate with the chosen platform and what data they contribute.
MDRManaged detection and response adds a service team to the detection and response arrangement. Agree monitoring coverage, escalation contacts, authority for response actions and the responsibilities shared with your internal team.

Include access and everyday controls.

Detection tools sit alongside firewalls, email security gateways, privileged account management and network access control. Review the systems each control covers and how administrative access is granted, used and removed. Existing controls may need to be integrated or adjusted as part of the project.

An alert also needs an owner. Define who reviews it, who decides on containment and how the business is informed. Share your current security products, device and site counts, and the monitoring or access-control gaps you want to address.

Where does your security coverage need attention?

Share your current tools, device and site counts, and the monitoring or access-control gaps you want to address.

Discuss your project