SIEM platform health
Collector health, ingestion, parsing, rule administration, and a scheduled technical check.
Managed Security Services
SCHEDULED SECURITY PLATFORM ADMINISTRATION
Support
Operational Care for the Security Platforms You Already Use
Managed security is scheduled administration of already deployed security platforms: platform health, log parsing, patch governance, and security-agent currency, for the contractual systems and the contractual operating hours.
Novatelia provides structured managed administration for enterprise security platforms. The source activities include weekly patch reviews, SIEM log collector health checks, endpoint signature verification, and scheduled vulnerability assessments. Each of those is included when the agreement names it.
Security platform administration is not equivalent to a 24/7 staffed SOC.
Novatelia does not publish a 24/7 security operations center. A SIEM health check is not continuous monitoring.
Explore the Security Platforms and Operational Checks
Illustrative operational coverage — actual platforms, review intervals and response commitments are defined by the agreement.
01
Firewall administration
Platform health, approved policy administration, firmware considerations, configuration review, and the maintenance window. Policy changes are not automatic. This is not an operational firewall panel.
02
SIEM and log pipeline health
Log-source connectivity, collector availability, parsing health, correlation-rule maintenance, retention dependencies, and a scheduled exception report. A healthy collector is not a staffed SOC, and a health check does not prove every relevant threat was detected.
03
EDR and endpoint agent currency
Agent connectivity, signature or definition currency where that product uses them, platform health, and exceptions. Not every EDR uses the same update model. No coverage percentage is published.
04
Patch governance and UEM
Approved patch review, testing, deployment supervision, UEM policy context, change windows, and exceptions. Patches are not all applied automatically, and patch administration is not the elimination of every vulnerability.
05
Scheduled security posture review
Scheduled platform checks, a vulnerability assessment when the contract includes one, documented exceptions, escalation planning, and a periodic executive review. A vulnerability assessment is not a penetration test.
What Defines a Managed Security Agreement?
01 — Covered security platforms
Inventory of covered security platforms, including SIEM, UEM, EDR, and firewalls, plus any other platform the agreement names.
02 — Operational windows and escalation
Agreed operational review windows and escalation channels. Coverage hours and response commitments are contract-specific.
03 — Authorized technical contacts
Named internal technical points of contact for access coordination, change approval, and communication. This page does not collect credentials.
Five Operational Assurance Deliverables
01
Scheduled platform health audits
Scheduled weekly or monthly security platform health audits, on the cadence the agreement names.
02
Patch testing and deployment supervision
Ongoing patch testing and deployment supervision inside approved windows. The word ongoing in the source means the contracted cycle, not continuous monitoring.
03
SIEM parsing and correlation maintenance
SIEM correlation-rule maintenance and log parsing health checks on the schedule.
04
Endpoint agent and definition verification
Endpoint agent connectivity and definition currency verification for the agents in scope.
05
Executive security posture reviews
Periodic executive security posture review meetings covering findings, exceptions, and priorities the engagement can actually report.
From Scope Agreement to Periodic Review
01
Define agreement and SLA
Platforms, tasks, hours, windows, contacts, and contractual escalation.
02
Authorized access and scheduled-check setup
Administrative access handover and the agreed review mechanisms. The source phrase monitoring setup means this scheduled-check setup. It is not a 24/7 SIEM service.
03
Routine administration
Scheduled platform checks and the maintenance the agreement names.
04
Escalation and periodic reporting
Exceptions, escalation under the agreement, and scoped reviews.
A Healthy SIEM Is Not the Same as a Staffed SOC
Continuous security monitoring
Ongoing evaluation of events, with detection and response coverage. That model has to be established separately. It is not created by this page.
Security operations center
Staffed operations, analyst processes, and incident triage under an explicit coverage model.
Novatelia does not publish a 24/7 SOC as part of this service.
Maintaining Security Platform Currency
Endpoint agents, definition updates where the product uses them, platform patches, and UEM controls meet in a review cycle: review, evaluate, test, approve, deploy or supervise, and document. The same workflow is not mandatory for every technology. No patch-success statistic is published.
Keeping the Logging Infrastructure Operationally Understandable
Log sources feed collectors or forwarders. Parsing and normalization prepare events for the SIEM. Scheduled administration reviews collector health, parsing errors, correlation-rule changes, and retention dependencies. That flow is not an automatic threat-response workflow, and no customer log is shown.
Security Administration Requires Explicit Authorization
Administrative access is customer-approved. Privileged accounts, least privilege where practical, change authorization, maintenance windows, and a record of approved changes are engagement controls. A certified privileged-access process is not claimed. This page has no terminal and does not collect passwords or firewall exports.
Documenting Operational Findings and Next Actions
Illustrative report structure — not an actual Novatelia customer report.
- Covered platforms
- Review interval
- Checks performed
- Exceptions
- Patch and agent currency
- Escalated items
- Recommended next actions
- Outstanding approvals
Understand the Boundaries Between Security Services
Managed Security Services
Scheduled administration of deployed security platforms.
Cybersecurity Assessment
A separate review of the current security baseline.
Security Architecture & Design
A separate target-state design engagement.
Managed IT
A separate recurring administration service for agreed IT systems.
SOC / continuous threat monitoring
Not established as an offering by this page.
Penetration testing
Not automatically included in Managed Security.
Defined Platforms, Defined Hours, Defined Responsibilities
Named platforms, task scope, review intervals, maintenance windows, technical contacts, escalation channels, response commitments where expressly agreed, and reporting intervals. This page does not publish universal 24/7 availability, a guaranteed incident response, a recovery SLA, a remediation deadline, a detection guarantee, or continuous SOC staffing.
Explore the Broader Cybersecurity Infrastructure Portfolio
The cybersecurity hub is the wider portfolio. This page stays on scheduled platform administration.
Cybersecurity Hub
Further Reading on Security Operations
Managed Security Services — Questions and Answers
01What does managed security administer?
The health of platforms already in the agreement: parsing, patch governance, and agent currency, on the schedule that agreement names.
02Is this a 24/7 SOC?
No. Novatelia does not publish a 24/7 SOC. Hours and escalation are contractual.
03What are Managed Security Services?
Scheduled administration of security platforms the customer has already deployed. Hours, systems, and any response commitment are written in the engagement.
04Which platforms can be covered?
The inventory can include firewalls, SIEM, UEM, and EDR, plus other platforms the agreement names. A platform that is not named is out of scope.
05Does managed security include firewall administration?
Firewall health and approved policy administration can be in scope. A change still needs authorization and the agreed window.
06Can SIEM log collector health be checked?
Yes, as a scheduled check of collector availability, ingestion, and parsing, when the SIEM is in the agreement.
07Is SIEM administration the same as threat monitoring?
No. A SIEM health check is not continuous monitoring.
08Does a SIEM platform create an SOC?
No. A configured SIEM does not create a staffed security operations center.
09Can endpoint security agents be reviewed?
Connectivity and definition currency can be reviewed for the agents in scope. That review is not complete endpoint protection by itself.
10What does endpoint definition currency mean?
Whether the detection content the product uses is current, where that product updates by signature or definition. Not every EDR works this way.
11Can patch testing be included?
Patch testing and deployment supervision can be in the agreement, inside an approved change window. Success percentages are not published.
12Are vulnerability assessments included automatically?
No. A scheduled vulnerability assessment is included when the contract names it. It is not a penetration test, and it is not in every agreement. Weekly reviews in the source description are likewise agreement-qualified.
13What is UEM administration?
Administration of the unified endpoint management platform named in the agreement: policy and device-management context, not an integration built on this website.
14How are maintenance windows defined?
By the agreement: the review schedule, the hours, and the change windows the customer approves.
15Are security incidents responded to immediately?
Response commitments exist only where the contract writes them. This page does not publish immediate alert response or a 24/7 retainer.
16What is included in a platform health report?
The checks the schedule names: platforms, interval, exceptions, and follow-up. The sample structure on this page is illustrative, not a customer report.
17Are executive security posture reviews available?
Periodic executive security posture review meetings are a source deliverable when the agreement includes them.
18Is Managed Security different from Cybersecurity Assessment?
Yes. Assessment reviews the current security baseline. Managed Security administers platforms that are already deployed, on a schedule.
19Is Managed Security different from Managed IT?
Yes. Managed IT is recurring administration of agreed IT systems. Security-platform administration is this service.
20How can a business define its security-platform administration requirements?
Open the RFQ draft. It saves a browser draft. It does not submit a request, publish a price, confirm hours, activate a contract, or issue a quotation reference.
Define the Security Platforms Your Organization Needs Managed
The RFQ currently saves a browser draft. It does not submit a request or issue a quotation reference.