Cloud Information Security Cannot be Ignored
Enterprises around the world are undergoing a digital transformation revolution, and they are beginning to adopt, migrate, and become familiar with today's complex cloud-based technologies. The security of the cloud itself is the responsibility of the cloud vendor, but how to maintain the security in the cloud requires a comprehensive information security solution to protect it. Microsoft joins hands with Acer Cloud Architecture to lay out the Cloud Native Security market. The two parties have jointly launched Cloud SOC to serve users in the Taiwan market.
The main challenge of cloud information security is managing complexity and keeping abreast of and protecting all activities in the cloud. Acer eDC can provide appropriate cloud-native protection solutions regardless of the stage of cloud transformation an enterprise is in, such as vulnerability management, detecting important network events, responding to events, collecting threat intelligence and taking action to users.
Threat Detection and Response Services Are Integrated in Cloud-Native
MICROSOFT AZURE SENTINEL及DEFENDER FOR ENDPOINT
What problems did we assist customers in solving:：
7x24 Threat Event Monitoring
Alert trigger filtering classification helps customers focus on high-risk notifications.
Automated Deployment and Management Platform
Simplify client management and rule settings through automated deployment of related resources.
Real-time Data Collection and Analysis
Large-scale correlation analysis originates from Logs such as cloud bottom layer, network, AAD, endpoint services and other application systems.
Machine Learning and Risk Behavior Analysis
Enable machine learning to improve the accuracy of notifications and dynamically adjust rules.
Use Cloud-native SIEM - Azure Sentinel
Mainly using cloud-native tools, which can best meet the rapid changes in cloud technology.
Comprehensive Risk Management and Control
Combined with Microsoft Defender for Endpoint (MDE), it helps customers manage comprehensive information security from endpoint to cloud.
Service Architecture
Four Aspects of Safety Recommendations
Service Packages Portfolio
| Azure Cloud Security Service Ratings | |||||
| Service Level | Basic Service | Moitoring Service | |||
| B1 Assessment |
B2 Protection |
M1 Cloud SOC |
M2 Threat Response |
||
| Security technical support services | SLA | 5x8 | 5x8 | 7x24 | 7x24 |
| Network security enhancement recommendations (Vent, NSG, VPN, WAF, FW) | 1 time per quarter | Ｖ | Ｖ | ||
| Microsoft Defender for Cloud APP (CSPM) | 1 time per quarter | Ｖ | Ｖ | ||
| Microsoft Entra ID (MFA) | 1 time per quarter | Ｖ | Ｖ | ||
| Azure Monitor security monitoring alarm setting management suggestions | 1 time per quarter | Ｖ | Ｖ | ||
| Defender for Servers plan (VM) management recommendations | per month | Ｖ | |||
| Azure Web WAF security defense settings management recommendations | per month | Ｖ | |||
| Azure FW security defense settings management recommendations | per month | Ｖ | |||
| Azure DDoS security defense settings management recommendations | per month | Ｖ | |||
| Portal (Cloudgoda) Cloud Security Overall Risk Dashboard | daily | Ｖ | Ｖ | ||
| Azure account activity security audit log storage and management (Audit log) | daily | Ｖ | Ｖ | ||
| Azure virtual machine security audit log storage and management | daily | Ｖ | Ｖ | ||
| Azure Cloud Security Service Classification (Continued) | |||||
| Service Level | Basic Services | Moitoring Services | |||
| B1 Assessment |
B2 Protection |
M1 Cloud SOC |
M2 Threat Response |
||
| Security technical support services | SLA | 5x8 | 5x8 | 7x24 | 7x24 |
| Azure Network Security Audit Log Storage Management (NSG) | daily | Ｖ | Ｖ | ||
| Azure storage security audit log storage and management | daily | Ｖ | Ｖ | ||
| SOC monitoring alarm notification (SIEM, EDR, Logs) | daily | Ｖ | Ｖ | ||
| Customized settings for threat risk information (blacklist information) | daily | Ｖ | Ｖ | ||
| ITSM (Flowza) event tracking statistics system and online reports | daily | Ｖ | Ｖ | ||
| SOC customized rule alarm settings | 1 time per quarter | Ｖ | Ｖ | ||
| Threat risk automatic response setting and management (SOAR) | 1 time per quarter | Ｖ | |||
| Information security expert incident investigation (option) | 1 time per year | Ｖ | |||
| Event response processing assistance (option) | 1 time per year | Ｖ | |||
