Protect · Coming soon
Managed endpoint and identity protection
Protection on your devices and accounts, with alerts handled.
A managed service that deploys and configures protection from an established provider across your devices and accounts, takes in the alerts, triages them, escalates what needs a decision and tracks each one to resolution. This service is not yet available. When it is, the monitoring hours, who monitors and responds, what action they are authorised to take, how out-of-hours alerts are handled and which devices are covered will all be set out in your service agreement.
Register interest- Price
- Not available yet
- How you can engage us
- Ongoing service
- Delivered by
- Cyber Guys
- Review cadence
- As set out in the service agreement
Who delivers this: Protection technology is supplied by an established protection provider, named in the service agreement before the service starts. Any monitoring or response performed by that provider, and its hours, will also be set out in the agreement.
Who it is for
Businesses that want endpoint and identity protection run for them, with clear reporting on what was detected and what was done.
Scope
The devices and accounts listed in the service agreement, protected using an established protection provider named in that agreement.
What is included
- Deployment of the protection agent to covered devices
- Configuration of protection and detection policies
- Tracking of device and account coverage, with gaps reported
- Alert ingestion from the protection platform
- Triage of alerts to separate real threats from noise
- Escalation to your nominated contacts for decisions
- Response actions you have authorised in the service agreement, such as isolating a device or disabling an account
- Resolution tracking for every alert
- Regular reporting on coverage, alerts and actions taken
What is not included
- Work outside the agreed scope, which is quoted separately
- Monitoring outside the hours set out in the service agreement
- Devices or accounts not listed in the service agreement
- Response actions you have not authorised
- Full incident investigation and recovery (a separate incident response service)
- Purchasing hardware or replacing unsupported devices
How delivery works
- 01
Agree coverage
We agree which devices and accounts are covered, the monitoring hours, escalation contacts and the response actions you authorise.
- 02
Plan the rollout
We plan deployment in stages, starting with a pilot group, and agree how any existing protection product is removed.
- 03
Deploy and configure
We deploy the agent, configure policies and connect alerts to the service.
- 04
Confirm coverage
We reconcile your device and account list against the protection console and report any gaps.
- 05
Run the service
Alerts are triaged, escalated and tracked to resolution as set out in the service agreement, with regular reporting.
Who does what
You
- Approve the list of covered devices and accounts, and keep it current
- Nominate escalation contacts and keep their details current
- Authorise, in writing, the response actions the service may take
- Make decisions when an alert is escalated to you
Cyber Guys
- Deploy and configure protection on covered devices and accounts
- Track coverage and report gaps
- Triage, escalate and track alerts as set out in the service agreement
- Take only the response actions you have authorised
- Report on coverage, alerts and actions
Your IT provider or partner
- The protection provider named in the service agreement supplies and operates the protection platform
- Your IT provider, where they manage devices, supports deployment and removal of any existing product
Access we need
- Administrator access to device management to deploy the agent
- Access to identity platform logs for account protection
We never ask for your password. Access is through a named account that you or your IT provider create for the engagement, and can remove at any time.
Dependencies and licences
- Protection platform licences for every covered device and account
- Supported operating systems on covered devices
- Some identity protection features depend on your Microsoft 365 or Google Workspace licence
What you receive
- Coverage register
- Configured protection policies
- Alert and resolution log
- Regular service reports
How we know it is finished
- Onboarding is complete when every covered device and account shows as protected, or is recorded as a gap with a reason
- Escalation contacts and authorised response actions are confirmed in writing
Related services
Microsoft 365 security
Secure your Microsoft 365 tenant without breaking how your business works.
Quoted on scopeRequest a quoteIncident preparedness
Know who does what before something goes wrong.
Quoted on scopeRequest a quoteIncident response and remediation
Coming soonStructured investigation, containment and recovery when something goes wrong.
Register interest
Register interest in Managed endpoint and identity protection
This service is not available yet. Leave your details and we will let you know when it is. Nothing is ordered.