Deloitte has now expanded its portfolio of managed security services to include a managed extended detection and response (MXDR) offering that incorporates security monitoring and response capabilities developed by Deloitte and third-parties. which is its partner.
Curt Aubley, MXDR chief Deloitte and a managing director for Deloitte Risk & Financial Advisory for Deloitte & Touche LLP, said that as cybersecurity becomes more complex and challenging, more organizations are relying on the expertise of an external service. providers to secure their IT environment.
Deloitte’s portfolio is based on a suite of software-as-a-service (SaaS) platforms that drive a range of managed services delivered by cybersecurity professionals hired by Deloitte. The modules within that SaaS suite address everything from analytics to seamless response, including threat prevention, detection, and remediation for endpoints and cloud security workloads. Other modules address zero-trust identity management systems, insider threats, proactive threat hunting, intelligence, attack surface and vulnerability management and unified log and analytics management.
Deloitte MXDR partners include Amazon Web Services (AWS), CrowdStrike, Exabeam, Google Cloud Chronicle, ServiceNow, Splunk and Zscaler. Upcoming iterations of the suite will include additional alliance partners as Deloitte’s platform evolves, Aubley said.
Deloitte’s modular SaaS platform is built on an extensible modern cloud platform that is not only easier to expand when needed but also reduces the overall cost of securing an IT environment, Aubley said. Organizations can also contract any of Deloitte’s services separately, if necessary, rather than having to consume the entire platform, he added.
Ultimately, the total cost of maintaining security will be distributed to a customer base that would otherwise have to hire their own team of cybersecurity professionals, Aubley said.
It’s unclear how much organizations will rely on IT service providers to manage security for them in 2022 and beyond. However, as threats multiply and become more sophisticated, the likelihood that an internal team of IT and cybersecurity professionals will successfully combat them decreases. Most organizations today rely on a mixture of internal and external cybersecurity expertise to manage their cybersecurity tools and platforms. Of course, with the addition of each new tool and platform, the total cost of security increases as additional security professionals are brought in to manage them.
Whatever the strategy, it seems that cybercriminals are re-investing a large percentage of their ill-gotten gains in advanced platforms that allow them to automate and organize the management of cyberattacks. Every organization today, to one degree or another, is involved in what amounts to a cybersecurity arms race. Each organization will decide for themselves how much to invest, for example, in next -generation artificial intelligence (AI) platforms. The alternative would be to defer the cost of having that capability by using a service that provides all the same benefits without incurring all the costs.