What are people using these days for MDR manages services?

Security & GRC

Bluevoyant8%

Deloitte36%

PWC22%

EY7%

Accenture15%

E-ISA1%

Bulletproof5%

Other - comment below7%

88 PARTICIPANTS
682 viewscircle icon1 Comment
Sort by:
Director, Network & Security Services in Educationa year ago

Sophos MDR

Content you might like

If your organization has been hit with a ransomware attack in the past, when was the attack(s) first initiated. Select all that apply.

Over the weekend (Saturday or Sunday)18%

During the night (Monday-Friday between 6pm and 8am)53%

During normal business hours (Monday-Friday between 8am and 6pm)38%

On or around a holiday (e.g., Christmas, Labor Day, etc.)14%

Unsure16%

View Results

How do you plan to increase profitability for your MSP business in 2022? (Select all that apply).

Adding MDR and other advanced security17%

Consolidating vendors44%

Expanding product breadth31%

Automating processes36%

Outsourcing strategies (ex: SOC or NOC)29%

Differentiating from competitors28%

Focusing on reputation building19%

Moving more to the cloud13%

Redefining MSP metrics6%

View Results

As part of our NYSE IPO prep, we’re debating how to communicate our system hardening efforts in regulatory disclosures (e.g., SEC Form 20-F, SFC).

Would you recommend sharing % compliance (e.g., “85% CIS Tier 2”) or sticking to qualitative descriptions of how we identify and mitigate risks? Also, do SFC/ISO 27001 expectations require full ISMS integration, or is a % model acceptable?

We’re preparing for an IPO on the NYSE as a Foreign Private Issuer and evaluating CIS Benchmarks to measure OS and database hardening.

Our proposed tiers:
• Tier 1 (70–80%) baseline
• Tier 2 (85–90%) for sensitive data
• Tier 3 (95–100%) for mission-critical systems

Is 80% compliance defensible for IPO due diligence with SEC or SFC? Should Tier 3 be considered mandatory for critical systems? And can compensating controls (e.g., PAM, microsegmentation) offset gaps in legacy environments?

Which tech conference do you intend to attend in person next year or have already participated in this year, and what motivated your choice?

Read More Comments