Magenta Security Services for Microsoft DACH:3 months Implementation

Initial situation and requirements The rapid growth of digitization is also placing steadily increasing demands on security. While employees are becoming increasingly mobile (e.g. home office), applications and data are shifting more and more to the cloud. Zero trust represents a key approach to meeting these challenges.

In addition, cyberattacks are becoming more sophisticated. Attackers are constantly developing their methods and tools. Artificial intelligence (AI) techniques are also increasingly being used. Even though end devices are the main gateways, attacks are also or additionally carried out via e-mails and identity theft.

For an effective defense, a solution is needed that on the one hand takes all this into account and also considers other security-relevant log and event sources. On the other hand, this solution must be state-of-the-art (e.g. AI-based). At the same time, its permanent further development must at least keep pace with that of the attackers. And not only at the tool level, but also in the professional management of such tools.

With Magenta Security for Microsoft (MSMS), Telekom offers a modern and comprehensive solution that seamlessly integrates the customer's own Microsoft security tools to be able to detect even complex and manual attacks such as APTs and respond to them promptly. Our highly professional Security Operation Center performs continuous analysis of suspicious cases and initiates appropriate responses to security incidents. By combining state-of-the-art threat hunting processes with Microsoft security features, the SOC can independently perform a very accurate analysis of actual security-threatening events and also initiate coordinated countermeasures. Magenta Security for Microsoft offers companies a cost-attractive way to raise security to the next level.

Scope of service With Magenta Security for Microsoft, Telekom offers protection against cyberattacks based on state-of-the-art technologies. Magenta Security for Microsoft is made up of the following components:

• Consulting and setup of Microsoft Security Features according to customer needs. • Management of customer provided Microsoft Security Features - Defender for Endpoint & Defender for Identity, Defender for Office 365, Sentinel . • Operation of a Security Operation Center with Security Analysts to assess customer alerts, a review process and Threat Hunting processes, and the ability to independently take immediate action on critical security events. • Monthly reports with a summary overview of the security status. • Monthly review meetings on the current security status and coordination of recommendations for action. • Support in the event of a crisis, around the clock.

The customer benefits from: • the use of state-of-the-art technologies to detect, analyze and defend against cyber attacks; • the high quality of analysis of security incidents and 24x7 monitoring by the Telekom Cyber Defense & Security Operation Center (SOC); • the initiation of countermeasures to ward off particularly time-critical attacks, such as ransomware attacks; • the transparency and visibility of potential threats and risks in its own network and the resulting possible proactive improvement of its security posture; • the strong partnership with a large established SOC, especially the monthly meetings with the experienced security analysts to discuss the current security status of the customer's environment; • the modular structure of the solution, which allows a step-by-step implementation.