Seven points a solid RFP should cover when hiring an MDR provider
If you’ve ever made a Request for Proposal (RFP) to engage a Managed detect-and-respond (MDR) provider, you’ll know what a tricky dribble it is… There are hundreds of prospective providers and a great deal of marketing buzz to wade through.
To help you work through the complexities of this market — and better compare providers’ offerings — we’ve put together this brief guide.
Download our guide to read more about the seven key considerations to consider when evaluating your next MDR provider. Topics covered include:
- Core Objectives: Understand your core objective. Is it detecting and responding to attacks, or just meeting compliance requirements? Is your business in need of next-wave MDR, a more advanced and solid solution?
- Threat Visibility: You don’t need to purchase specific security technology; onboarding and tuning is accelerated, meaning you are up and running quicker.
- Pricing: Don’t be put off by out-of-budget pricing. Instead, negotiate.
- Single Providers vs Multiple Providers: Partner with a single provider for must-run work.
- Outcome vs Technology: Keep your focus on outcomes, not technology... But feel free to replace legacy technologies if they don’t deliver on your security outcomes or enable your MDR provider to succeed.
- Meaningful SLAs: When evaluating proposals and SOWs, look for meaningful SLAs that will enable you to achieve your desired outcomes.
- Role of Procurement: Procurement has a role to play in the vendor selection process, but the final decision should be made by stakeholders who understand the business risks.
Ready to dive into the Seven points a solid RFP should cover when hiring an MDR provider?
















