Securing your business

Security operations

We cover the entire security spectrum in terms of monitoring, detecting, and remediating threats. But what really sets us apart is the way we dovetail security with business insight.

Our response is informed by an understanding of our clients’ day-to-day business and their longer-term priorities, as well as the environment they are operating in. In the case of regulated industries, this includes the stringent breach detection and reporting requirements that apply.

This means that if a security incident happens, day or night, we have the knowledge required to respond appropriately, and the means to contain and remediate any damage, usually while the business continues to operate.

Please take a look at our Security services to see what we can offer you – or contact us to find out more.

• Deep expertise

  We have considerable expertise in areas such as threat intelligence and dark and deep web scanning. Plus we use a robust Security Information and Event Management system (SIEM), which means we can detect sophisticated cyber threats often missed by more traditional technologies.

  Our Chief Information Security Officer, Alex Bransome, is a Certified Information Systems Security Professional with Certified Ethical Hacker status. This means he’s adept in assessing the security of computer systems and in finding and resolving weaknesses.

  Alex’s core Security Operations team of five is supported by our wider Security Incident Response team, made up of over 20 in-house professionals who have all completed the demanding Blue Team Level 1 (BTL1) exam, used to train advanced technical defenders in areas such as law enforcement, government, and finance.

  All of our security specialists work closely with other teams at Doherty Associates to not only respond to any issues, but to keep security and business objectives aligned. And with such a well-established client base, we are able to gather and aggregate a wealth of information and insight and apply this to improving security across each organisation we support.

• Fast response

  Our in-house Security Incident Response team members are well-trained and equipped with best-in-class tools. This means they can immediately address a variety of incidents and threats, even when complex or cleverly disguised.

  This is a very different approach to many others in our sector, for whom a ‘managed security service’ simply involves a plug-in detection tool that raises alerts, which are then handed over to a single internal support team (who may be asleep at the time) or to another organisation entirely.

  Our whole approach is joined up and multi-layered. For example, our first responders might remove a piece of malware, but our Security Operations team will then look deeper into how it got there in the first place, what the opportunities were to block it, and what improvements might be made to prevent such an incident occurring in the future.

  We also look at day-to-day security incidents through a business lens with a view to minimising any negative impacts and to addressing problems at their source.

• Clear reporting

  We work in a collaborative way with our clients, with regular two-way conversations and updates that make sense in the real world.

  These updates can be fully customised depending on the KPIs you wish to monitor, the level of detail you require, and the format you find most helpful. And having all this information to hand means that if you ever need to make a formal report, e.g. due to a breach in GDPR regulations, all the content you need is readily available – and you can also tap into our expertise in compiling such a report, if you wish.

  Our aim is for you to always understand the actions we have taken, the threats, risks, or gaps we have identified – and which are most critical. As well as what your evolving security roadmap should look like if you are to continue meeting your compliance, legal and regulatory obligations – as well as your business objectives.