Item: NetWitness Incident Response and Cyber Defense Services
Rating: 8
Author: Bhuwan Chandra

Overall Satisfaction with NetWitness Incident Response and Cyber Defense Services

Pros and Cons

Pros

Comprehensive security services to improve threat detection & response.
Holistic Security program for targeted attack defense -across three interrelated areas of expertise people(including organization model), process & technology -with particular emphasis on threat detection& response.
Assess organization security gap & provide a detailed improvement plan that is specific for the organization.

Cons

NetWitness Incident Response and Cyber Defense Services SIEM managed services which we call managed SOC requires multiple resources with expertise in different domains like Threat forensics & Logs Analytics ..etc. Sometimes it gets tough to get the right resources.
Difficulty in navigating & configuring, which is necessary for any solution to get the best result & reporting part.
Commercial of solution in comparison to competitors is at the higher end.

Alternatives Considered

FireEye Security Suite, FireEye Security Orchestrator and IBM Security QRadar

NetWitness Incident Response is Very well define KPIs & also easily integrate with solutions like NGFW & Web proxy ,EDR & DLP ..etc.. Reporting part is in-line with each compliance being used in different industries.

Likelihood to Recommend

If an organization has all the best breed cyber security tools are in place & want to know the holistic security posture of the organization, they need to best security program or SOC than RSA NetWitness Incident Response and Cyber defense Services is the best solution. The bottom line is not only buying the best solution but it is also about establishing an effective security program that brings together security expertise, process, and technology to improve an organization's ability to prevent detect and respond to attacks.

Comments

Please log in to join the conversation

NetWitness Incident Response & Cyber Defense Services- Best SOC Solution for all Industries