ICL SOC: Identification and response to cyber threats

IB ICL SOC Threat Response Centre’s team of experts monitors, analyses, and investigates cyber incidents 24/7, including weekends and holidays.

ICL SOC’s highly qualified experts have successful experience of handling cyber security threats on the international and Russian market. The competencies of our experts have been confirmed by international information security certificates.

We will help you develop inter-functional processes by “befriending” the Information Security and IT Departments.

We guarantee flexibility in the selection of the service level for the given job.

ICL SOC offers 3 service levels:

Silver: Automatic detection of information security events. Event monitoring and processing by the ICL SOC Team 24/7/365. Reporting the identified information security incidents. Providing recommendations for high-priority incidents. Continuous work on decreasing false positives.

Gold (Silver+): Advanced analysis including recommendations for all information security incidents. Active responses through coordination of actions taken by IT teams included in the incident until its resolution. Development of a strategy for mitigating and recovery from high-priority information security incidents. A set of correlation rules which may be replenished.

Platinum (Gold+): Proactive threat search (Threat Hunting). Development of specialised response scenarios at the client’s request.

As part of cyber incident monitoring and response, SOC Analytics Team uses information protection tools such as SIEM, EDR, Sandboxes, Vulnerability Management (VM), as well as Threat Intelligence Feed (TI).