Datasheet

WithSecure
Co-Monitoring
ServiceTM

We’ve got your backWithSecureTM Co-Monitoring Service

Security operations areunder pressure
Cyber crime is becoming more widespread and destructive,and technology alone provides insufficient defense.
Organizations require 24/7 expertise to detect and respondto cyber incidents, but security talent is expensive and, in acompetitive market, it is hard to build and retain a team.
Global economic conditions are forcing:• Businesses to outsource non-core functions like security
operations to service providers,• Managed security service providers (MSSPs) to look for new
ways to profitably deliver effective security operations.
What if you could respond cost-effectively and with assurance
to detections that present the most risk?

2WithSecureTM Co-Monitoring Service

Our Co-Monitoring
service
WithSecure™ Co-Monitoring is delivered by threat hunters
who monitor severe-risk detections around the clock, ensuring
true positive incidents are escalated to the customer withguidance on how to contain and remediate the threat.

WithSecure™ Co-Monitoring
WithSecure DRT
24/7 validation, investigation andremediation guidance for all
severe-risk detections

Severe-risk detections
Elements
EDRdetections

Lower riskdetections

Partner or end
user analysts

3WithSecureTM Co-Monitoring Service

WithSecureTM Co-Monitoring provides a cost-efficient
alternative to acquiring these capabilities in-house, helping
organizations overcome the challenges of cybersecurity.
WithSecureTM Co-Monitoring supports Elements EDR
customers by:• Maintaining constant watch over severe-risk detections incustomers’ IT environments,• Validating and investigating detections,• Ensuring that true positive incidents are escalated in a timelyfashion,• Providing advice to customer representatives oncontainment and remediation.
Full details of the Co-Monitoring service scope can be found inthe service description. WithSecureTM can also provide to EDR
customers seamless escalation to its government-assured
Incident Response (IR) services. IR services are optional andshould be separately purchased.

FeatureEDR

EDR + Co-Monitoring

Detection

Yes

Yes

Investigation

No

Yes

Alert escalation

No

Yes

Response guidance

No

Yes

Response action

No

Partner-defined

IR Retainer

Optional

Optional

Operating hours

Customer-defined

Out of office hours or 24/7

Offering

Software only

Software + service

4WithSecureTM Co-Monitoring Service

The outcomes we deliver
Our co-security approach and experience enables yoursecurity operations teams to:

Increase resilience
Expert investigation and remediation guidance for all yoursevere-risk detections

Minimize disruption
24/7 security operations support and seamless access togovernment-assured IR services

Maintain customer trust
Enhanced detection & response controls that enable you
to comply with regulations

5

WithSecureTM Co-Monitoring Service

Our Elements portfolio
Services

IncidentResponse
Readiness

Pricing models

Elevate toughcases toour experts

Annuallicense

Incident
Response
Retainer

Co-Monitoringof severe-risk
detections

Monthly
subscription

Emergency
Incident
Response
SupportSolutionsSupport

Usage-based
security

SolutionsEndpoint
Protection

Vulnerability
Management

Collaboration
Protection

Protects from the mostsophisticated ransomware,malware and zero-day threats.

Identiﬁes an organization’s assets
pinpointing the vulnerabilities andthe most critical loopholes.

Fortiﬁes the Microsoft 365 cloud
collaboration platform’s built-in
security measures with a powerful
security layer.

Endpoint Detection
and Response

Cloud Security
Posture Management

Gives instinctive detection
capabilities and versatile response
actions. Can be expanded withElevate, the 24/7 expert help.

Identiﬁes cloud misconﬁgurations that could be exploited ina cyber attack

6

Who We Are
WithSecure™, formerly F-Secure Business, is cyber security's reliable
partner. IT service providers, MSSPs and businesses – along with thelargest financial institutions, manufacturers, and thousands of theworld's most advanced communications and technology providers –trust us for outcome-based cyber security that protects and enables
their operations. Our AI-driven protection secures endpoints andcloud collaboration, and our intelligent detection and response are
powered by experts who identify business risks by proactively hunting
for threats and confronting live attacks. Our consultants partner withenterprises and tech challengers to build resilience through evidencebased security advice. With more than 30 years of experience in building
technology that meets business objectives, we've built our portfolio togrow with our partners through flexible commercial models.
WithSecure™ Corporation was founded in 1988, and is listed on NASDAQOMX Helsinki Ltd