Service Overview

This is a managed service offering where experienced AHEAD personnel support Customers, including:

• 24x7x365 threat monitoring and analysis of in-scope log data from applications, databases, operating systems, network technologies, and security appliances.
• 24x7x365 priority review of system generated offenses.
• Review and respond to Customer inquiries is a timely manner
• Provide initial analysis of a potential security incident identified and escalated by Customer
• Provide remediation/countermeasure recommendation, if applicable
• Document details of analysis and recommendation in ticketing system
• Escalate and notify of security incidents and other issues to appropriate Customer personnel and appropriate third parties.
• Perform operational change related activities to SIEM platform
• Manage Capacity and Performance of security monitoring platform
• Tune and optimize SIEM alerts
• Work cases with the appropriate vendor to completion, and interface with the assigned Customer personnel during incident events