Deploying a 24/7 managed SOC for Mercialys

The challenge

• No active monitoring:
  When the IT Director joined, he inherited an environment already equipped with a detection tool (EDR), but it was not being monitored, leaving alerts without an immediate response.
• 24/7 responsiveness:
  The main challenge was guaranteeing an optimal response time whenever an alert was raised, particularly at night and at weekends, when no one is on site to monitor the system.
• Mental load on the team:
  The in-house IT team (around ten people) needed to be freed from this concern during the day, with the assurance that monitoring was constant and professional.
• Out-of-hours attack risk:
  The organisation had to protect itself against the potentially devastating cost of a ransomware attack or data breach occurring while its offices were closed.

Our solution

• Outsourcing the 24/7 SOC:
  Choosing a partner able to provide permanent human monitoring of the alerts raised by the EDR, ensuring that 100 per cent of alerts are followed up and handled.
• Technology upgrade:
  Upgrading the EDR tool to sharpen detection, paired without exception with this continuous monitoring service.
• Access to specialist expertise:
  Cyber experts made available to support the in-house Mercialys team, in particular to carry out alert verification on suspicious activity.
• Faster response time:
  Establishing a process that significantly reduces the delay between detecting a threat and acting on it, a key success factor in cybersecurity.
• A culture of service and improvement:
  Building a partnership grounded in genuine openness to improvement and a strong sense of customer service.

Testimonial

The whole team has gained peace of mind, during the week but above all at night and at weekends. […] Today we can point to three major benefits: every alert is followed up and handled, our response time has improved significantly, and expert support is available to my team whenever it is needed.

— Philippe K., CIO, Mercialys