CEO, Author, Cyber security best practices at Sentree Systems, Corp.
Reseller
Top 10
2022-08-18T05:25:53Z
Aug 18, 2022
Hi,
No, not just a budget. It depends on your team.
Do they have the expertise to manage and monitor the data/logs coming in from your entire environment?
Would they know what to do if there was an attack on your business? If the answer is no, I would say it is time to invest in a true real-time detection like an MDR (Managed Detection and Response).
Depending on the solution you use, they will offer an XDR solution which not only covers your endpoints but covers other devices that still touch your network and remote users as well. This is also called a SOC (Security Operation Center).
Head of Marketing, Cybersecurity Solutions at Netsurion
Real User
Top 5
Jun 21, 2023
I think @Kevin Mabry nailed it, but if I may add my thoughts as it seems the confusion around MDR/XDR/EDR/SIEM/SOC knows no bounds out there. :) I'll tack on an answer.
Head of Marketing, Cybersecurity Solutions at Netsurion
Real User
Top 5
2023-06-21T18:35:15Z
Jun 21, 2023
If you are considering Managed XDR, its important to understand which component is in question... is it the the "XDR" solution itself? Or the delivery model of "Managed"?
First off, you should consider investing in an XDR solution to eliminate the silos and blind spots in your security stack and potentially consolidate/simplify your SecOps architecture.
Second, you should consider "Managed" if you don't absolutely have the in-house talent and bandwidth to implement/manage/monitor the tech stack. But be warned, both terms "XDR" and "Managed" have a sliding scale... exactly how "extended" is the attack surface coverage, and how "managed" is the solution.
Managed XDR is a smart and cost-effective solution to boost your security posture, simplify your tech stack, free up your resources. But evaluate your options carefully. And then, there's the type of XDR - Open or Native. This video helps unpack the difference. https://www.netsurion.com/vide...
Find out what your peers are saying about SentinelOne, CrowdStrike, Palo Alto Networks and others in Extended Detection and Response (XDR). Updated: April 2024.
Hi,
No, not just a budget. It depends on your team.
Do they have the expertise to manage and monitor the data/logs coming in from your entire environment?
Would they know what to do if there was an attack on your business? If the answer is no, I would say it is time to invest in a true real-time detection like an MDR (Managed Detection and Response).
Depending on the solution you use, they will offer an XDR solution which not only covers your endpoints but covers other devices that still touch your network and remote users as well. This is also called a SOC (Security Operation Center).
I think @Kevin Mabry nailed it, but if I may add my thoughts as it seems the confusion around MDR/XDR/EDR/SIEM/SOC knows no bounds out there. :) I'll tack on an answer.
If you are considering Managed XDR, its important to understand which component is in question... is it the the "XDR" solution itself? Or the delivery model of "Managed"?
First off, you should consider investing in an XDR solution to eliminate the silos and blind spots in your security stack and potentially consolidate/simplify your SecOps architecture.
Second, you should consider "Managed" if you don't absolutely have the in-house talent and bandwidth to implement/manage/monitor the tech stack. But be warned, both terms "XDR" and "Managed" have a sliding scale... exactly how "extended" is the attack surface coverage, and how "managed" is the solution.
Managed XDR is a smart and cost-effective solution to boost your security posture, simplify your tech stack, free up your resources. But evaluate your options carefully. And then, there's the type of XDR - Open or Native. This video helps unpack the difference. https://www.netsurion.com/vide...