Managed security
Somebody answerable for your security.
You run a business, not a security operations centre. We take the running of its security off your hands, and we answer for it in words a board, a customer and an insurer can read.
Each part below can be bought on its own. Most businesses start with a conversation and a reading of where they stand.
What we do
Advice
Where you stand, and what to do first.
We read your estate and your obligations — the customer asking for a questionnaire, the insurer's renewal, the contract clause — and tell you in plain language what matters, and in what order.
Onboarding
We take over the running of it, without surprises.
A planned takeover in waves, with change windows you agree, a written record of every step, and a way back from each one. Your people know what is changing before it changes.
Monitoring
Watched, and reported in words you can use.
We watch the estate around the clock and keep your score current. Every month you receive a report written for a business owner: what changed, what we fixed, what we recommend, and what we chose not to do and why.
Response
When something goes wrong, we work it with you.
Under the authority you granted, every action on the record, and a plain account afterwards of what happened and what changed. An engagement names the people and the hours.
What Monitored means
- At Monitored, Indominus MS acts as your Managed Trust operator.
- We deploy security best practices across your tenant and keep your score current, monitor it around the clock (24 hours a day, every day), and respond to attempts to intrude.
- Before anything is deployed across the tenant in bulk, we ask for your approval.
How we act in your estate
- We hold no standing administrator rights. Access is granted for a task, expires on its own, and is requested again for the next one.
- Every action we take leaves a record you can read: what was changed, by whom, when, and under which approval.
- Before we change something we tell you what it touches, who will notice, and whether it can be undone. You may approve nothing and still be watched: watching is the service, changing is the offer.
- When we cannot do something, we say what is missing and whose job it is to fix it. We do not report a check we could not run as a check that passed.
Who it is for
- Small and medium businesses that answer to customers, insurers or regulators for their security and do not have a team to answer with.
- Suppliers to larger organisations — defence, health, manufacturing, government — whose customers have started asking how secure they are.