Security engineering · Specialist service
Managed Security Controls
Security tools need ongoing configuration maintenance and carefully planned changes. We take on the agreed administration of selected controls so their policies reflect your environment’s needs and SOC findings.
Service scope
Security platform management
The service may cover firewalls, web application firewalls, endpoint EDR and secure remote access. We agree technologies, responsibilities and a change catalogue. We review rules, apply updates and work with vendor support within available permissions.
Policy administration
We handle approved rule and setting changes, documenting purpose, scope and service-access impact.
Rule reviews
We verify the justification for exceptions and permissions and identify configurations requiring improvement.
Updates and health
We plan agreed updates, check solution health and verify operation afterwards.
Technical cooperation
We coordinate vendor-support cases and incorporate recommendations from SOC threat analysis.
Project deliverables
What will your team receive?
- A catalogue of managed devices, platforms and tasks.
- A policy-change and approved-exception register.
- Rule review and post-update check results.
- A list of recommendations and vendor-support cases.
Delivery conditions
What do we agree before starting?
- Administrative access to specified solutions.
- Valid update and support entitlements where required.
- Owners approving changes and agreed maintenance windows.
How we work
From understanding the need to verifying the result.
Taking over the agreed scope
We inventory configuration, access, known problems and change-handling rules.
Maintenance and reviews
We perform agreed tasks, organise rules and cooperate with SOC on necessary improvements.
Checking outcomes
We verify controls after changes and document remaining exceptions and recommendations.
Clear responsibilities
What is already included, and what do we extend?
Activities necessary to operate the service and execute approved SOC response belong to the relevant core plan. This extension covers broader control administration; it is not an extra charge for an already agreed playbook.
Before making a decision
Questions about managing security controls
Does the service cover any security product?
We agree supported technologies and versions before starting. Scope depends on available expertise, permissions and support options.
Who approves a firewall rule change?
The person designated in the agreed change process. Urgent security actions may follow separate, pre-approved playbooks.
Are licences and vendor support included?
The service specification defines how licences and support access are provided. Taking over administration does not automatically include them.
Related expertise
Connect activities that complement each other.
The next step
Let us define a scope that makes sense for your organisation.
Let us discuss your environment, priorities and team responsibilities. We will use this to define the work, required access and service conditions.