Managed SIEM and SoC Services
We offer a UK based SoC service that is manned 24/7. The service is built upon Microsoft Sentinel deployed within the customers existing Microsoft Tenant. Data is fed into our SoC case management and automation platform where our analysts investigate, enrich and respond.
Features
- 24/7 one-hour event response
- User behavioural analytics
- Threat intelligence integration
- Automated alerting
- Log ingestion from on premises and cloud services
- Support for huge range of products
Benefits
- Event investigation
- Customer notifications
- Customised dashboards
Pricing
£160 a user a year
- Education pricing available
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
4 0 1 9 1 2 2 5 2 1 5 9 5 1 9
Contact
OGEL IT LTD
Sam Newman
Telephone: 01438 300335
Email: gcloud@ogelit.com
Planning
- Planning service
- Yes
- How the planning service works
- We work with customers to understand the size of their estate, security posture, logging and retention requirements. Using this information we propose the required sizing and licensing requirements for the deployment.
- Planning service works with specific services
- Yes
- Hosting or software services the planning service works with
- Microsoft Sentinel
Training
- Training service provided
- No
Setup and migration
- Setup or migration service available
- Yes
- How the setup or migration service works
-
Our on boarding team will review the existing customer tenant, licenses and any existing Sentinel deployment. We will then put forward a plan to bring the configuration inline with our best practises.
Dashboards and alerting will be configured in collaboration with the customer based on the log types and threat landscape. - Setup or migration service is for specific cloud services
- Yes
- List of supported services
- Microsoft Sentinel
Quality assurance and performance testing
- Quality assurance and performance testing service
- No
Security testing
- Security services
- Yes
- Security services type
-
- Security strategy
- Security risk management
- Security design
- Cyber security consultancy
- Security testing
- Security incident management
- Security audit services
- Certified security testers
- No
Ongoing support
- Ongoing support service
- Yes
- Types of service supported
- Hosting or software provided by a third-party organisation
- How the support service works
-
In addition, the SOC service includes the following deliverables:
1. the SoC will process all events in the SIEM platform and all eligible events will be investigated by a SOC analyst. Events that are eligible for investigations are:
a. Critical alerts from security log sources
b. High severity threats identified
c. At risk users identified by Defender
d. Alerts on all predefined alerting criteria
f. Customer reported incidents
2. Incidents will be investigated, and an incident analysis and remedial recommendation will be supplied in line with SLA
3. The SoC will provide reporting on security events
a. Automated compliance reporting
b. Monthly Security and incident reporting
Service scope
- Service constraints
- This service is dependant on the customers Microsoft tenant for the hosting of Microsoft Sentinel. The customer must have Sentinel appropriately licensed and agreement in place for the provision of storage services for Sentinel data. The customer must provide appropriate administrative access to their tenant to setup and manage the service. The service is based on a minimum seat count of 200 users for 1 year.
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- .
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- None or don’t know
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- No
- Support levels
-
Detect & Response (Technology + 9/5 Managed SIEM)
Outsourced SoC (Technology + 24/7 Managed SoC)
Standard (inclusive) support levels are:
4 hour fix (Mon-Fri 08:00 to 18:00)
8 hour fix all other times
24/7/365 UK Support desk contact by: Phone, Email, Web
99.85% service availability, measured on a quarterly basis.
99.95% availability of data storage, measured on a quarterly basis.
Enhanced support levels available.
Resellers
- Supplier type
- Reseller providing extra features and support
- Organisation whose services are being resold
- Microsoft, Cybanetix, CSA
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Up to Developed Vetting (DV)
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- Peers Quality Assurance Limited
- ISO/IEC 27001 accreditation date
- 26/04/2024
- What the ISO/IEC 27001 doesn’t cover
- The customers Microsoft tenant and its configuration are not within the scope of our ISO certification.
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- No
- Other security certifications
- No
Social Value
- Social Value
-
Social Value
- Tackling economic inequality
- Equal opportunity
Tackling economic inequality
OGEL IT are an SME committed to developing a business within the local and surrounding community by creating employment and training opportunities.Equal opportunity
All employees will be treated fairly and with respect. Selection for employment, promotion, training or any other benefit will be on the basis of aptitude and ability. The company is also committed to preventing discrimination of any type against its employees by third parties like suppliers, clients and the general public. Our SpeakUp policy and processes enable anonymous reporting by anyone should they have any concerns or issues with the company or any of its employees.
Pricing
- Price
- £160 a user a year
- Discount for educational organisations
- Yes