Microsoft Sentinel SIEM/SOAR Ongoing Monitoring — SOC Threat Detection & Response

IT Partner provides a SOC monitoring service that includes threat detection configuration, alerting setup, agreed-upon incident response actions, compliance monitoring, security incident reporting, and security posture advice. The service can use Microsoft Sentinel or an in-house developed SIEM solution, depending on the organization’s security requirements and IT environment. 24/7 support, continuous monitoring, and ongoing maintenance are available only as optional extra-cost add-ons.

IT Partner can deliver the service using either Microsoft Sentinel or an in-house developed SIEM solution. Microsoft Sentinel is used when the organization wants integration with its Azure environment, while the in-house SIEM option is tailored to specific security requirements and infrastructure.

For the Microsoft Sentinel option, IT Partner deploys and configures Microsoft Sentinel to integrate with the customer’s Azure environment for threat detection and response. IT Partner also configures the Sentinel environment, including rule creation, dashboard monitoring, and alert configuration. Ongoing maintenance is not included by default and is available as an optional paid add-on.

For the in-house SIEM option, IT Partner designs and develops a bespoke SIEM solution based on the client’s security requirements and IT infrastructure. IT Partner then integrates the custom SIEM into the IT environment. Ongoing maintenance and updates are not included by default and are available as optional paid add-ons.

No. Round-the-clock security monitoring is not included by default. 24/7 support, continuous monitoring, and ongoing maintenance are available as optional extra-cost add-ons delivered through IT Partner's NOC, third-party support partnerships, and a Microsoft Premier Support agreement.

The service includes agreed-upon response actions to contain and mitigate detected risks within the agreed scope. The exact actions should be defined during the engagement, because the service description commits to executing agreed actions but does not list a universal response playbook for every customer.

Yes, IT Partner provides detailed security incident reports as part of the SOC monitoring service. The reports are intended to document detected incidents and support strategic advice for improving the organization’s security posture.

For the Microsoft Sentinel option, the customer must have an active Azure subscription. The customer should also ensure its IT infrastructure is ready to support SOC operations, including any necessary network configurations.

For the in-house developed SIEM option, detailed technical requirements and specifications must be established before design and development. This is necessary because the solution is tailored to the customer’s specific security requirements and IT infrastructure.

The implementation starts by defining security goals and selecting either Microsoft Sentinel or the in-house SIEM option. IT Partner then implements the selected solution, tests and tunes it for operational effectiveness, and, if purchased as an optional paid add-on, transitions the customer into active monitoring with continuous evaluation and adaptation.

The service description does not specify a fixed duration or billing period. Prospective buyers should confirm the expected timeline with IT Partner because implementation effort depends on the selected option, infrastructure readiness, integrations, and agreed monitoring scope.

The service description does not state that downtime is required. Any business impact should be confirmed during planning, because integration with the customer’s IT environment, network configurations, and testing requirements may vary by environment.

The customer is responsible for ensuring IT infrastructure readiness for SOC operations, including necessary network configurations. The customer must also maintain open communication with IT Partner and collaborate on security policy adherence and regulatory compliance requirements.

IT Partner is responsible for deploying and configuring Microsoft Sentinel or designing and integrating the in-house SIEM solution, depending on the selected option. IT Partner also provides alerting setup, agreed threat response actions, incident reporting, and strategic security posture advice within the agreed scope. 24/7 support, continuous monitoring, and ongoing maintenance are available only as optional paid add-ons.

The service does not include 24/7 support, continuous monitoring, or ongoing maintenance by default; these are available as optional extra-cost add-ons delivered through IT Partner's NOC, third-party support partnerships, and a Microsoft Premier Support agreement. The service also does not include Advanced Analytics and Threat Intelligence subscriptions, which may require additional threat intelligence feeds for enhanced detection, and it excludes XDR integrations and long-term maintenance and support beyond initial deployment unless separately purchased.

No, Extended Detection and Response integrations are listed as not included in this service. If the organization needs broader XDR-based detection and response capabilities, that scope should be discussed separately with IT Partner.

No, advanced analytics and threat intelligence are not included by default. Additional threat intelligence feed subscriptions may be required if the customer wants enhanced detection capabilities beyond the base service scope.

The listed price for the service is $12 per project, with SKU ITPWW160SECRC. The source does not define what counts as a project or the billing period, so buyers should confirm the pricing unit, duration, and any additional costs with IT Partner before purchase.

After implementation, testing, and tuning, the service can transition to active monitoring if the optional paid monitoring add-on is purchased. Under that add-on, IT Partner provides 24/7 support, continuous monitoring, and ongoing maintenance through IT Partner's NOC, third-party support partnerships, and a Microsoft Premier Support agreement within the agreed scope.

The service is identified as Microsoft Sentinel SIEM/SOAR ongoing monitoring, SKU ITPWW160SECRC. The listed manager is Roman Sotnik, and buyers should reference the SKU when confirming scope, pricing, duration, optional add-ons, and whether Microsoft Sentinel or the in-house SIEM option is the better fit.