The Rapid7 MTC Advanced service shall provide a single, integrated solution for threat preparation, detection, and response. It is delivered as a collaborative partnership, offering customized security guidance and hands-on 24x7x365 monitoring, threat hunting, incident response, and exposure management. ● Primary Point of Contact: Serve as the main point-of-contact for detection & response service-related matters. ● Communication: Communicate frequently to provide updates, review security posture, discuss new threats, and guide security maturity. ● Deliverables: ○ Monthly strategic calls. ○ Quarterly Business Reviews (QBRs). ○ Security Roadmap assistance. ○ Guidance on security best practices and threat intelligence. ● 24x7x365 Monitoring: Continuous monitoring of logs and network activity for indicators of compromise (IOCs) and suspicious behavior. ● Alert Triage and Investigation: Triage, investigate, and escalate security alerts according to district’s criteria and preferences. ● Threat Hunting: Proactively hunt for threats using Rapid7's threat intelligence and methodologies. ● Incident Validation: Validate potential incidents and provide initial response actions. ● Communication: Provide real-time communication on active threats and incidents according to the district’s criteria and preferences.
