Cyber MXDR
The BUI CyberMXDR service is a managed security service. It provides streamlined security monitoring and response by correlating security alerts into larger incidents, providing security teams greater visibility into attacks, and incident prioritization. The service is backed up by world-class security consultants to assist with incidents and ongoing advisory services.
Features
- Insight - We can collect data across the enterprise
- Identification - We can detect threats.
- Investigation - We can analyse suspicious activities.
- Response - We can actively monitor and optimise
- We can accelerate threat response and reduce impact
Benefits
- Security - Reduce risk and improve security posture
- Compliance - Measure your compliance with government and industry regulations
- Efficiency - Streamline, optimise and protect your business systems
- Availability- 24/7X365
Pricing
£2,570 to £15,300 a unit
- Education pricing available
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
3 0 2 3 0 6 0 1 8 3 3 7 3 0 1
Contact
BUI LTD
Thys Janse van Rensburg
Telephone: +44 2045 666490
Email: UKGovCloud@bui.co
Planning
- Planning service
- Yes
- How the planning service works
-
BUI leverages Microsoft Sentinel engagement to plan a customer Sentinel onboarding to BUI MXDR service by following a structured process. The process includes several phases, starting with a customer kick-off meeting to introduce the team, discuss the onboarding framework, access control, and onboarding requirements.
The next phase is the build phase, where the Sentinel workspace is configured, and baseline Microsoft data sources are connected. Additional resources such as the AMA agent and Linux log forwarder are also discussed and deployed.
The deploy phase involves deploying Sentinel solutions such as playbooks, workbooks, and automation. Third-party data sources and threat intelligence are also discussed and deployed.
The automate phase includes workbook and automation workshops, where business use cases are discussed and recommended1
The final phase is the operate phase, where the deployment is reviewed, fine-tuned, and signed off. A post-deployment checklist is performed, and any outstanding issues are resolved.
This structured process ensures a smooth onboarding of the customer to the BUI MXDR service, leveraging the capabilities of Microsoft Sentinel. - Planning service works with specific services
- No
Training
- Training service provided
- Yes
- How the training service works
-
BUI provides training and awareness to customers for cloud and security through various workshops and programs. For example, BUI offers a “Discover Sensitive Data Workshop” to improve the security posture and protection of hybrid and multi-cloud infrastructure workloads. This workshop provides hands-on training in ongoing security monitoring and incident response, and helps customers operationalize Microsoft Defender for Cloud to reduce overhead.
BUI also offers a “Secure Multi-Cloud Environments' program, which provides customers with expert consulting to enable them to make the journey to the cloud through the innovative use of technology.
In addition to these programs, BUI has a team of expert advisors and technical consultants that can provide customers with tailored training and awareness programs to meet their specific needs and requirements - Training is tied to specific services
- No
Setup and migration
- Setup or migration service available
- Yes
- How the setup or migration service works
- BUI, Azure Expert Managed Service Provider , leverages the Microsoft Cloud Adoption Framework (CAF) and programs like Azure Migrate and Modernization Programs (AMMP) to drive cloud migrations with customers. BUI uses the CAF to provide a structured and consistent approach to cloud adoption, ensuring that customers have a clear roadmap for their migration. Customers with on-premise or legacy SIEM solutions will benefit from BUI's Microsoft Sentinel Migration and Modernization partnership with Microsoft. This program helps accelerate and simplify customer migration and modernization projects to Microsoft Sentinel workload. In this engagement, BUI will provide expert guidance to execute a Microsoft Sentinel migration project. It can include migrating from any 3rd party or on-prem solutions to Microsoft Sentinel.
- Setup or migration service is for specific cloud services
- Yes
- List of supported services
- Microsoft Azure
Quality assurance and performance testing
- Quality assurance and performance testing service
- Yes
- How the quality assurance and performance testing works
-
BUI, as an Azure Expert Managed Service Provider (MSP), can assist customers with quality assurance and performance testing when migrating workloads to Azure. BUI can review the application infrastructure and conduct the required assessment and performance analysis using Azure logs and application insight metrics. Based on this review, BUI can detail and implement improvements to ensure that the application is hosted on a highly performant platform that can scale as demand for services increases.
BUI also includes an annual Disaster Recovery (DR) test as part of its MSP support tier. The DR test is scheduled with the customer and BUI teams to ensure application and resource availability and performance during the DR test and when reverting from DR instances. The environment is initially assessed to establish the current resilience configuration and overall architecture in relation to its expected Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO).
Overall, BUI can assist customers with quality assurance and performance testing when migrating workloads to Azure, ensuring a smooth and successful transition to the cloud.
Security testing
- Security services
- Yes
- Security services type
-
- Security strategy
- Security risk management
- Security design
- Cyber security consultancy
- Security testing
- Security incident management
- Security audit services
- Other
- Other security services
-
- CyberMXDR - Managed Extended Detection and Response
- DFIR - Digital Forensics and Incident Response
- Certified security testers
- Yes
- Security testing certifications
- Other
- Other security testing certifications
- CEH
Ongoing support
- Ongoing support service
- Yes
- Types of service supported
-
- Buyer hosting or software
- Hosting or software provided by a third-party organisation
- How the support service works
-
BUI provides a range of managed and support services to customers in the cloud. For Security services BUI offers Cyber MXDR as a managed security operations service, These services include consulting, operations management, and 24/7 managed detection and response. By offloading these tasks to BUI, customers can free up their internal IT teams to focus on more complex initiatives and efforts that drive new business outcomes.
Overall, BUI provides a range of support services to customers in the cloud, helping them to effectively monitor, secure and maintain their cloud environments and focus on driving new business outcomes.
Service scope
- Service constraints
-
BUI’s CyberMXDR service is a pure remote service that provides support to customers in the cloud.
The CyberMXDR service is delivered remotely, meaning that customers can access support from BUI’s team of expert advisors and technical consultants without the need for on-site visits. This allows for a more efficient and cost-effective support experience, as customers can receive assistance from BUI’s team of experts without incurring travel or other expenses.
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
-
Below outlines a mapping of BUI Managed Services Severity Matrix, and explains the priority levels and agreed SLA time for response for incidents and requests.
P1(Level1)- 2 hr response from acknowledgement of incident. 4
hrs to resolution (best effort).
P2(Level2)-4 hrs response from acknowledgement of incident.
9 Business hrs to resolution (best effort).
P3(Level3)-8 hrs response from acknowledgement of incident.
27 Business hrs to resolution (best effort). - User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.1 AAA
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- No
- Support levels
-
CyberMXDR comes in four Tiers: (verify updated Tiers/costing etc)
- Bronze
-Silver
-Gold
-Platinum
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Up to Developed Vetting (DV)
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- BSI
- ISO/IEC 27001 accreditation date
- Last Revision Date: 30/10/2023
- What the ISO/IEC 27001 doesn’t cover
- Annexure A Controls pertaining to Software Development
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- Yes
- Any other security certifications
- ISO22301:2019
Social Value
- Social Value
-
Social Value
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Tackling economic inequality
BUI creates opportunities, supporting economic growth and business creation.
BUI creates employment opportunities particularly for those who face barriers to employment and/or who are located in deprived areas.
BUI creates employment and training opportunities.
BUI supports educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications.
At a head office level opportunities for entrepreneurship and to help new, small organisations to grow, supporting economic growth and business creation is done.Equal opportunity
We have an Employment Equity Committee which assist is tackling inequality in employment, skills and pay in the contract workforce.
Along with the above we have Modern Slavery Statement and an Internship programme that supports in-work progression to help people, including those from disadvantaged or minority groups, to move into higher paid work by developing new skills.
The Employment Equity Committee assists in maintaining a great working environment for disabled individuals as well.Wellbeing
BUI offers Medical Aid to all employees, assisting with physical and mental health.
Further to that BUI partakes in CSR Initiatives to assist the community as well.
Pricing
- Price
- £2,570 to £15,300 a unit
- Discount for educational organisations
- Yes