Managed Detection and Response (MDR)
A cloud-native detect and respond capability that protects business processes and digital assets from cyber threats. The service leverages Palo Alto’s Cortex solutions to monitor networks, data, user and device activity to respond to risks such as ransomware, suspicious activity, compliancy/policy violations and data breaches.
Features
- Malware detection and exploit prevention
- Advanced and Persistent Threat (APT) protection
- Proactive vulnerability detection and threat hunting
- Rapid response through predetermined automated prevention/protection action
- Flexible policy-based controls for different users group needs
- Integrates cloud, network and endpoint solutions for full enterprise cover
- Threat intelligence integrated into detection and response actions
- Customer reporting and dashboards provide situational awareness
- Identification/blocking of zero-day threats
Benefits
- Reduced probability of compromise/incident
- Faster identification of compromise when it occurs
- Minimise impact of compromise through quicker more informed response
- Provides proactive defence – reducing impact of any attack
- Supports in meeting compliance standards or regulation
- Underpins legal and forensic investigations
- Informs evolution of your policies as your business changes
- Helps you manage cost (compliance, legal, incident response and recovery)
- Tailored service levels to meet your risk appetite and budget
Pricing
£400 to £1,200 a unit a day
- Education pricing available
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
6 4 0 5 7 9 4 8 1 3 5 8 0 9 1
Contact
Net Consulting
Sana Qazi
Telephone: 02920 972020
Email: bids@netconsulting.co.uk
Planning
- Planning service
- Yes
- How the planning service works
-
The service is cloud-based and includes MDR agents installed on key endpoints throughout the enterprise. NCL will plan the deployment of these agents for the Buyer.
The service is capable of automatically executing pre-defined responses to threats. NCL will work with the Buyer to define and plan appropriate responses for each incident type.
The service can ingest data from 3rd party tools, using either out-of-the-box integrations or development. NCL will work with the Buyer to plan the desired integrations to enable data ingestion.
The service is available as either as either fully managed, self-service, or a virtual SOC/co-managed operating model. NCL will work with the Buyer to identify the most appropriate operating model that meets their requirements and plan its setup and deployment accordingly. - Planning service works with specific services
- Yes
- Hosting or software services the planning service works with
- Palo Alto Cortex
Training
- Training service provided
- Yes
- How the training service works
-
Where appropriate, Net Consulting can provide targeted, effective and timely training on all of our cloud services. Net Consulting’s training not only improves your technical skills, it enhances the long-term value and return on investment of your technology.
Curriculum Design: NCL can create a training curriculum that covers operational, maintenance, and growth aspects of the services. This includes theoretical knowledge, practical skills, and best practices.
Flexible Delivery Modes: NCL offer training in various formats such as in-person workshops, live online sessions, and on-demand videos to cater to different learning preferences.
Hands-on Labs: NCL incorporate hands-on sessions where participants can practice in a controlled environment, simulating real-world scenarios they will encounter.
Step-by-Step Deployment: NCL will implement the IT service in phases, if possible, to allow gradual adaptation and learning.
Real-Time Training: NCL will conduct training sessions in tandem with the service deployment to provide immediate hands-on experience with the actual setup.
Documentation: NCL engineers and architects provide comprehensive documentation including user manuals, FAQs, and troubleshooting guides for future reference. - Training is tied to specific services
- No
Setup and migration
- Setup or migration service available
- Yes
- How the setup or migration service works
-
The service is cloud-based and includes MDR agents installed on key endpoints throughout the enterprise. NCL will setup and deploy these agents for the Buyer.
The service is capable of automatically executing pre-defined responses to threats. NCL will setup the automated responses for the Buyer.
The service can ingest data from 3rd party tools, using either out-of-the-box integrations or development. NCL will setup the desired integrations/complete the necessary development to enable data ingestion.
The service is available as either as either fully managed, self-service, or a virtual SOC/co-managed operating model. After identifying the most appropriate operating model for the Buyer, NCL will complete the setup and deployment for the Buyer. - Setup or migration service is for specific cloud services
- Yes
- List of supported services
- Palo Alto Cortex
Quality assurance and performance testing
- Quality assurance and performance testing service
- Yes
- How the quality assurance and performance testing works
- We ensure that our services go through a rigorous quality assurance process that is defined by the ISO9001:2015 Policies. Our qualified Performance / Cyber Consultants carry out thorough automated and manual performance testing. This ensures that the performance of the services we provide are of the highest standard
Security testing
- Security services
- Yes
- Security services type
-
- Security design
- Cyber security consultancy
- Security incident management
Ongoing support
- Ongoing support service
- Yes
- Types of service supported
-
- Buyer hosting or software
- Hosting or software provided by your organisation
- Hosting or software provided by a third-party organisation
- How the support service works
- N/A
Service scope
- Service constraints
- N/A
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
-
P1 - 1 hour
P2 - 4 hours
P3 - 8 hours
P4 - within 24 hours
Change Control - no SLA - User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.1 AA or EN 301 549
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- Web chat
- Web chat support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support accessibility standard
- WCAG 2.1 AA or EN 301 549
- Web chat accessibility testing
- None
- Support levels
-
Net Consulting operates a triage process, which helps decide the order in which incidents are escalated. On preliminary assessment, we apply measures according to the impact of the incident to you. This allows us to categorise incidents from Priority 1 to Priority 4.
Example Support Levels:
PRIORITY 1 - CRITICAL
Priority 1 incidents are likely to critically impact your ability to conduct business. We’ll respond to a Priority 1 incident within 1 hour.
PRIORITY 2 - HIGH IMPACT DISRUPTION
Priority 2 incidents are high-impact problems that interrupt your organisation, but there’s still capacity to continue to be productive. We’ll respond to a Priority 2 incident within 4 hours.
PRIORITY 3 - MINOR IMPACT DISRUPTION
Priority 3 incidents are medium-to-low impact problems that comprise of limited loss of non-critical business functionality. We’ll respond to a Priority 3 incident within 8 hours.
PRIORITY 4 – INFORMATIONAL REQUEST
Priority 4 issues include requests that do not fall within the Priority 1 – Priority 3 classifications. We’ll respond to a Priority 4 incidents within 24 hours.
Resellers
- Supplier type
- Reseller providing extra features and support
- Organisation whose services are being resold
- Palo Alto Networks
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Up to Developed Vetting (DV)
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- SOCOTEC
- ISO/IEC 27001 accreditation date
- 22/09/23
- What the ISO/IEC 27001 doesn’t cover
- All of NCL's services are covered by ISO/IEC 27001
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- Yes
- Other security certifications
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Covid-19 recovery
- Tackling economic inequality
- Equal opportunity
- Wellbeing
Fighting climate change
At NCL, we recognise the urgent need to address climate change, and we are committed to leveraging our expertise and resources to make a positive impact. As part of our ongoing commitment to sustainability and Environmental Management, Net Consulting is ISO14001 certified and has a publicly available Carbon Reduction Plan, which we update annually. Through innovative technology solutions, strategic consulting, and advocacy, we are dedicated to reducing carbon footprints, promoting renewable energy adoption, and facilitating sustainable practices within our organisation and wider ecosystem. As well as our corporate efforts, we also seek to influence our staff and our suppliers to improve their environmental practices. Thankfully, unlike many businesses, we’re pretty low risk in regard to environmental impact. As a predominantly knowledge-based company, our greatest impact on the environment is travel to and from work; as well as electricity consumption and this is actively monitored and minimised where possible. Our goal is to be at the forefront of the fight against climate change, driving meaningful change through our actions and empowering others to join us in creating a more sustainable future for generations to come. That said, there’s always more that can be done to reduce these aspects further, as small activities can have a big impact.Covid-19 recovery
Despite the Covid-19 pandemic, thankfully, being, behind us, I’m sure we can all agree that we are still feeling the effects. We work closely with our staff to understand which workplace conditions could be improved to support staff returning to the office. These included effective social distancing including rules for using meeting rooms and placing plastic screens between each desk to reduce the spread of infection. We also introduced remote and flexible working for staff who needed to be at home part-time, particularly when feeling unwell. To combat loneliness and isolation, and to support our staff’s health and wellbeing while working remotely, we also introduced regular touchpoints between teams in the form of teams meeting as well as informal virtual socials to ensure people still felt they were connected to and had support from the wider business while working from home full time. The introduction of our Employee Assistance Programme and Private Medical Insurance ensured everyone felt fully supported and could discuss any health issues 24/7 including easily accessing mental health support from home.Tackling economic inequality
As a UK business, we have a duty to help support our business environment including developing the skills of the current and future workforce. We believe that access to technology and digital resources is key to addressing economic inequality. We are committed to leveraging our expertise to empower underserved communities, bridge digital divides, and create opportunities for economic advancement. Through initiatives focused on digital inclusion, skills training, and affordable technology solutions, we work to level the playing field and ensure that everyone has the tools they need to succeed in the digital age. Especially as an organisation specialising in IT services, we are in a unique position to upskill our communities in IT and cyber related fields in an increasingly digital world. As an SME, we also appreciate the benefits of a diverse supply chain. Through local forums and community groups we aim to advocate for equitable policies, prioritise diversity and inclusivity and help new organisations thrive, supporting them in breaking into high growth sectors and industries with high barriers to entry.Equal opportunity
At NCL we are always trying to identify and tackle inequality across all areas of our organisation, from recruitment practices, to training and upskilling our workforce, to providing development opportunities in the way of pay or promotion. Our mission is to create a workplace and business environment where every individual, regardless of race, gender, age, sexual orientation, disability, or background, has equal access to opportunities for growth, advancement, and success. We ensure the entire process is completely transparent, with all relevant information being published on our internal intranet for all staff to access and read at any time. Also, we are incredibly proud to be a Welsh business, however we understand that poverty and social exclusion are major issues in Wales, and we are trying to help this, particularly through providing employment opportunities to those from low-income/deprived areas. We extend this dedication to equal opportunity beyond our own organisation, partnering with clients and stakeholders to promote inclusive practices and equitable access to technology solutions. NCL are committed to harnessing the power of diversity to drive positive change and build a brighter, fair future for all.Wellbeing
At NCL, we understand that our people are our greatest asset. Without them, we’d just be some empty offices with some nice branding. It’s our responsibility to ensure all our people are happy and healthy, both physically and mentally. We are dedicated to integrating principles of wellbeing, safety, and security into every aspect of our work, ensuring that within our solutions NCL not only meet functional requirements but also prioritise the physical and mental health of users. We have fostered an open and honest environment at NCL, ensuring everyone feels supported and heard, able to discuss any issues with staff at all levels, including ensuring all line managers are appropriately trained to identify and support any staff who may require assistance.
Security across IT landscapes and the Cyber domain is at the core of what NCL provides. Through proactive and rigorous security measures, data protection protocols, and privacy standards, we strive to safeguard sensitive information and mitigate risks in an increasingly digital world for our customers.
Pricing
- Price
- £400 to £1,200 a unit a day
- Discount for educational organisations
- Yes