Who does what
Provider
- SIEM operation and tuning
- Alert classification and analysis
- Resolver-team escalation
Your team
- Azure account and access
- Remediation ownership
Details
Service scope
Best for Azure users retaining remediation owners
Offer
SOC & SIEM Service listed on Microsoft Marketplace.
Platform
Customer-tenant Sentinel plus shared Tenable.sc server scanning.
Handoff
Initial corrective planning and escalation to the agreed resolver group.
Full service analysis
Fujitsu SOC & SIEM Service operates Microsoft Sentinel, classifies alerts and sends investigated incidents and proposed corrective steps to the appropriate resolver group. The buyer retains its Azure account, assigns remediation owners and agrees which response work Fujitsu may perform.
- Your team owns
- The Azure account and agreed access permissions.
- Resolver-team decisions, containment and recovery not assigned to Fujitsu.
Pricing & contract
- Billing
- Custom
Request a quote separating SOC service, Sentinel consumption, retention, onboarding and server vulnerability scanning. Confirm whether the resolver team's containment and recovery work is included.
Tradeoffs & buying questions
Strengths
-
Platform maintenance and initial incident investigation are included in the documented scope.
Considerations
-
Escalation to a resolver group does not establish that Fujitsu completes containment or recovery.
Ask before buying
- Which resolver team takes each incident, and which containment actions may Fujitsu execute without approval?
- What log sources, retention periods and server vulnerability scans are included in the quote?
- Who owns Sentinel configuration changes and Azure costs, and what is handed back when the service ends?
Integrations
Platform / SIEM
- Microsoft Sentinel
Cloud
- Microsoft Azure
Other integrations
- Azure Monitor Log Analytics
- Tenable.sc
Common questions
Does this service take over all incident response?
The listed scope includes initial analysis, corrective planning and escalation. Confirm who executes containment and recovery for each incident type.