Who does what
Provider
- SIEM health and configuration
- Detection-rule maintenance
- Investigation and guidance
Your team
- Source systems and access
- Containment and recovery
Details
Service scope
Best for Google SecOps users sharing platform operation
Platform
Changes are made inside the customer's Google SecOps environment.
Operations
Log configuration, platform health and eligible detection rules.
Options
Threat hunting and technical account management are additional choices.
Full service analysis
Optiv manages Google Security Operations health, log configuration and detection rules, then investigates alerts and recommends mitigation. The buyer retains its environment and executes response work beyond the agreed co-management scope.
- Your team owns
- Source systems and access
- Containment and recovery
Pricing & contract
- Billing
- Custom
Request separate line items for Google licensing, ingestion, Optiv operations and onboarding. Threat hunting and technical account management are optional in the service brief.
Tradeoffs & buying questions
Strengths
-
Platform upkeep and incident investigation have an explicit shared operating model.
Considerations
-
Actionable findings leave a response handoff for the buyer to staff.
Ask before buying
- Which containment actions, if any, does Optiv execute under this agreement?
- Who changes log forwarders and resolves source-side collection failures?
- Are hunting, additional intelligence feeds and technical account management included?
Integrations
Platform / SIEM
- Google Security Operations
Common questions
Is this the same as Optiv MDR?
This profile covers Co-Managed Google Security Operations. The service brief specifies investigation and mitigation guidance alongside SIEM management.