It’s important to remember that MDR providers can only detect and respond to what they can see. For uncovered layers of the attack surface, security teams must have the people, process and technology to monitor, detect and respond to advanced and evasive threats. The critical decisions you must address are:
- What is the scope of our attack surface now and in the future?
- What level of coverage do we require across each layer of the attack surface?
- Do we have the resources to monitor, detect and contain attackers for areas that would be otherwise uncovered by an MDR provider?