Brochure

Elements EDR
co-security
services bytm
WithSecure
Enhance your security operations team withflexible access to combat-fit defenders

Co-delivered detection and response by WithSecuretm

Two decades of cyber security
incident response tells us thatthe cost of a cyber security
incident is 70-90% lower if it
can be contained within 72
hours of detection.

2

Co-delivered detection and response by WithSecuretm

Cyber risk high stakes
We live in a digital age. To succeed in business means being
exposed every day to the risk of cyber-attack.
The stakes are high: an incident dealt with correctly can beresolved in hours rather than months. The average cost of acyber-attack is €180,000: 60% of small businesses cease
operations within six months of an attack1,2.
Winners and losers are determined by how they manage cyberrisk. Boards and leadership teams that successfully steer theirbusiness through a crisis can avoid losing revenue throughlost customer trust, legal action and regulatory fines. They caneven find their careers enhanced.

1 https://www.hiscox.com/documents/2019-Hiscox-Cyber-Readiness-Report.pdf
2 https://www.forbes.com/sites/forbestechcouncil/2019/12/09/
will-your-small-business-withstand-a-cyberattack/3

Co-delivered detection and response by WithSecuretm

Obstacles to cybersecurity
Criminals have industrialized, and cyber-attacks are more
frequent, widespread, and damaging than ever before. Cloudtechnology and remote working is complicating IT, making it
harder to defend. An estimated 2,200 cyber security attacks
are detected each day3.
A 24/7 detection and response capability is an essentialdefense.

What if
What if you could respond with assurance to the detections
that present the most risk?

3 https://www.getastra.com/blog/security-audit/cyber-security-statistics/

45Co-delivered detection and response by WithSecuretm

How we help
Good security requires partnership. No one can solve every
cyber security problem alone.
We take a ‘co-security’ approach, bolstering your security
operation with experienced, threat informed, monitoring andinvestigation support. We offer two services:

WithSecuretm Elevate
WithSecure DRT

Elevate co-secures Elements EDR customers; they can have
our Detection and Response Team (DRT) investigate detections, and provide remediation guidance.

• Monitor of all severe-risk detections, out of office hours or 24/7,• Validate severe-risk detections and investigating them using
human threat analysts,• Escalate confirmed attacks directly to customers or partners
on-call,• Provide containment advice for fast and effectiveremediation.

(Validation, investigation and remediation
guidance for any detections raised to theDRT by the partner or end user)(24/7 validation, investigation andremediation guidance for all
severe-risk detections)

WithSecuretm Co-Monitoring
Co-security achieved by Elements EDR customers working in
WithSecure's DRT to:

WithSecure Elevate

WithSecure Co-Monitoring

Severe-risk detections
Elements
EDRdetections

Lower riskdetections

Partner or end
user analysts

Seamlessincident
response
supportWithSecuretm also provides seamless escalation to its government-assured Incident Response (IR) services for
EDR customers. Those that have an IR Retainer receive guaranteed support when they need it.

Co-delivered detection and response by WithSecuretm

Outcomes we deliver
Our co-security approach and experience enables yoursecurity operations teams to:

Increase resilience
Expert investigation and remediation guidance for all yoursevere-risk detections

Minimize disruption
24/7 security operations support and seamless access togovernment-assured IR services

Maintain customer trust
Enhanced detection & response controls that enable you
to comply with regulations

6

Co-delivered detection and response by WithSecuretm

The way we work
WithSecuretm products are deployed across 5.5 million
endpoints in tens of thousands of businesses. We understandin depth the whole threat data collection chain. We employ
over 50 threat researchers to identify new and evolving tools,
tactics and procedures used by attackers.
Our DRT is made up of experienced, research-led incident
investigators and responders enabled by technology. Our
processes and technology are optimized to deliver consistent,
stable detection and response services at scale.
When it comes to making critical decisions, you can trust ourdata – and what our experts are telling you about it.

7

Co-delivered detection and response by WithSecuretm

Our record
WithSecuretm has delivered managed detection and response(MDR) services since 2015. We co-secure companies, andgovernments worldwide. We conduct 1,200 investigations
each year. Every day, our DRT battles with organized, wellresourced criminal and state-sponsored groups.
We have been a government-assured incident response
service provider since 2013. Our capability is assured bygovernment agencies in Germany4 and the UK5.
We partner with our customers – in some cases for overa decade, equipping them with the means to thrive in an
increasingly complex and hostile cyber security world.

4 https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Cyber-Sicherheit/Themen/Dienstleister_APT-Response-Liste.pdf?__blob=publicationFile&v=11
5 https://www.ncsc.gov.uk/section/products-services/
verify-suppliers?scheme=Cyber+Incident+Response8Co-delivered detection and response by WithSecuretm

Our Elements portfolio
Services

Incident
Response
Readiness

Pricing models

Elevate toughcases toour experts

Annuallicense

Incident
Response
Retainer

Co-Monitoringof severe-risk
detections

Monthly
subscription

Emergency
Incident
Response
SupportSolutions
Support

Usage-based
security

SolutionsEndpoint
ProtectionVulnerability
Management

Collaboration
Protection

Protects from the mostsophisticated ransomware,malware and zero-day threats.

Identiﬁes an organization’s assets
pinpointing the vulnerabilities andthe most critical loopholes.

Fortiﬁes the Microsoft 365 cloud
collaboration platform’s built-in
security measures with a powerful
security layer.

Endpoint Detection
and Response

Cloud Security
Posture Management

Gives instinctive detection
capabilities and versatile response
actions. Can be expanded with
Elevate, the 24/7 expert help.

Identiﬁes cloud misconﬁgurations that could be exploited ina cyber attack

9Who We Are
WithSecure™, formerly F-Secure Business, is cyber security's reliable
partner. IT service providers, MSSPs and businesses – along with thelargest financial institutions, manufacturers, and thousands of theworld's most advanced communications and technology providers –trust us for outcome-based cyber security that protects and enables
their operations. Our AI-driven protection secures endpoints andcloud collaboration, and our intelligent detection and response arepowered by experts who identify business risks by proactively hunting
for threats and confronting live attacks. Our consultants partner withenterprises and tech challengers to build resilience through evidencebased security advice. With more than 30 years of experience in building
technology that meets business objectives, we've built our portfolio togrow with our partners through flexible commercial models.
WithSecure™ Corporation was founded in 1988, and is listed on NASDAQOMX Helsinki Ltd