Based on our three-tier security operations architecture, Cybertrust's Co-Managed SOC is the industry's first collaboratively managed MSS solution. It was designed for those organizations looking to build their own SOC in order to meet strategic, regulatory, cultural, or economic needs, but which also require a Security Operation vendor to provide back-end operations support and second- and third-tier technical assistance.

With the Co-Managed SOC, Cybertrust first establishes a SOC infrastructure – including a correlation and classification engine and SOC Analyst tools – at the customer's facility. We then complement this infrastructure by establishing Security Operations PPPs (Policies, Processes, and Procedures) and training the customer's first-line SOC staff. The end result is a fully functional SOC, tied into Cybertrust’s own Security Operations Centers for second- and third-tier support.

The Co-Managed SOC leverages Cybertrust's industry-leading OnlineGuardian^® Managed Security Service technology, which provides real-time monitoring and management of information security devices and applications.

A Better Bet
Cybertrust's Co-Managed SOC model is a lower-risk strategy for establishing a SOC than building it on your own. Establishing the in-house expertise and resources required for around-the-clock coverage – and ensuring the service keeps the organization as secure as a world-class outsourced MSS – can be both costly and time-prohibitive. Our Co-Managed SOC model also offers a faster time-to-market, as the SOC leverages Cybertrust's existing, proven, market-leading OnlineGuardian technology platform.

From the Ground Up
The Co-Managed SOC architecture includes four major components:

• Devices Under Management/Serviced Devices at the customer's premises
• The SMC (located at the customer's facility or our Data Center) hosting all the Cybertrust-specific equipment and hardware required for event collection, storage, analysis, correlation, mining, and Web reporting
• The SOC, where the organization's security analysts perform first-line analysis of security incidents and implement change requests on the Devices Under Management
• The Cybertrust SOCs, where Cybertrust analysts perform security management functions on a 24x7 basis, as well as second- and third-line support to your security analysts

Features & Benefits:
With the Co-Managed SOC, Cybertrust:

• Provides fast, expert development and implementation services – done right the first time
• Delivers expert training and certification services for the customer's staff
• Maintains the back-end event processing, correlation, incident classification, and escalation processes on the customer's behalf

Back to main Managed Security page