SOC/XDR express onboarding
SOC/XDR express onboarding should be positioned in Tunisia as a response to the following problem: the customer lacks structured detection, triage and response procedures. The offer targets the following outcome: SOC/XDR onboarding, connected sources, detection use cases and runbooks. In this market, the main emphasis is pragmatism, controlled costs, local delivery and RFC's local references; the packaging must therefore remain short, concrete and backed by local references.
- Security & Resilience
Identify priority risks, posture gaps and security actions to launch.
Connect detection and response
The customer lacks structured detection, triage and response procedures.
Pain points
The customer lacks structured detection, triage and response procedures.
Promise
Give the customer a concrete path towards this outcome: SOC/XDR onboarding, connected sources, detection use cases and runbooks. The commercial commitment must demonstrate that RFC can quickly deliver initial demonstrable value, with a short engagement scope, limited presales effort and an available RFC reference.
Outcome
SOC/XDR onboarding, connected sources, detection use cases and runbooks.
Recommended entry service
A short assessment to objectively map the situation, identify the major gaps and prepare a prioritised action plan.
Essential services
These services form the offer's foundation and contribute to the expected deliverables within the agreed scope.
- See details...Detection, SOC & response
SOC (Security Operations Center) Onboarding Express
Rapid SOC onboarding package: priority log sources, critical rules, escalation procedures and initial dashboards.
Services to go further
Activate complementary services according to priorities, constraints and capabilities already in place.
XDR (Extended Detection and Response)
Extended detection and response across endpoints, identity, messaging, cloud and applications, with multi-source correlation.
Incident Response Retainer
Availability agreement for cyber incident assistance, including scoping, escalation, investigation, coordination and lessons learned.
Talk to an RFC expert
Describe your priorities, constraints and projects to prepare a discussion with the relevant teams.
Technology stack
Protection, detection and recovery technologies selected according to risks and the chosen scope.
Security and resilience
Prioritise protections and test their effectiveness.
(Step 01)
Assess the exposure
Identify the assets, usages and risk scenarios to address within the agreed scope.
Deliverable
Risk map and protection objectives.
Organisations supported in their transformation
Find the organisations associated with the engagements presented, along with their industries and individual contexts.
Projects to inform your choices
Explore related engagements to understand the contexts, scopes and challenges covered by RFC.
- Client Reference
2024 - Industry
From an Elastic-based SOC
Sotacib
Elastic Security complements Sentinel coverage.
Tracked Indicators
Connected sources • qualified alerts
Explore the domain's other capabilities
Find complementary offers and areas of expertise to extend your approach according to your organisation's needs.
- See details...Security & Resilience
M365 Zero Trust baseline
M365 Zero Trust baseline should be positioned in Tunisia as a response to the following problem: the security posture is exposed by insufficiently hardened identities, access and M365 environments. The offer targets the following outcome: a prioritised security baseline, remediation and a pragmatic Zero Trust roadmap. In this market, the main emphasis is pragmatism, controlled costs, local delivery and RFC’s local references; the packaging must therefore remain short, concrete and backed by local references.
Talk to an RFC expert
Share your context, priorities and constraints. Our experts help you structure an IT journey aligned with your transformation goals.
Tell us about your challenges
Share your priorities to prepare for a focused discussion.