2A Cyber Guard · Step 03 · Protect
Professional security protection, around the clock.
Cyber threats do not keep business hours. Guard gives your business continuous security monitoring backed by a 24/7 Security Operations Center, with experienced analysts investigating threats and a defined escalation process when something needs your attention.
Included in every Guard plan
Managed protection, not a console full of alerts.
24/7 SOC-backed monitoring
Protected computers and servers are watched around the clock by a Security Operations Center.
Managed endpoint detection and response
Threat detection on every enrolled device, managed for you rather than left as alerts in a console.
Analyst-led investigation
Suspicious activity is triaged and investigated by experienced security analysts, not just flagged by software.
Supported containment
Where enabled and authorized by you, analysts can take supported actions, such as isolating an affected computer.
Documented escalation
Every Guard customer has a documented escalation process, so critical alerts reach the right people at your business and ours.
Ongoing security guidance
A named 2A Cyber advisor who knows your business, reviews what the service is seeing and helps you act on it.
When a serious threat is detected
Critical alerts reach the right people.
During onboarding we document your escalation process: who to call, in what order, how to reach them, and which containment actions you authorize. 2A Cyber is part of that path.
- Detect and investigate. The SOC investigates suspicious activity on your enrolled systems, day or night.
- Contain. Supported containment actions you have authorized are taken where needed.
- Notify. Serious threats are escalated through your documented process to your designated contacts, and to 2A Cyber.
- Follow through. Notifications and actions are documented, and your advisor helps you with next steps. Routine findings arrive in regular reporting instead.
Depending on your plan
Built around what your business runs.
We recommend a plan from your Check results. Your agreement lists exactly which systems are enrolled and which services are included.
- Identity threat detection. Detection of suspicious sign-ins and account takeover in Microsoft 365 or Google Workspace, where included in your plan.
- Security awareness training. Short, relevant training for staff, where included in your plan.
- Microsoft 365 security administration. Ongoing care of your Microsoft 365 security settings, where included in your plan.
- Quarterly security review. A standing review of what changed, what the service detected and what is next.
Clear boundaries
What Guard covers, and what is separate.
Continuous monitoring does not mean every issue is fixed on the spot. Here is where the lines are.
- 24/7 SOC monitoring of enrolled systems
- Included
- Containment actions
- Included where supported and authorized by you
- Identity threat detection
- Where included in your plan
- Hands-on IT remediation around the clock
- Not automatically included
- Emergency on-site response
- Not automatically included
- Full incident response and forensics
- Scoped separately unless your agreement includes it
- Price
- $750 to $2,500 per month.
- What sets the price
- Number of enrolled devices and users, whether identity threat detection is included, and any additional services.
- Coverage
- The systems enrolled under your agreement. Monitoring does not extend to systems that are not enrolled.
- Commitment
- Term, scope and escalation process agreed up front, in writing.
- Starting point
- Most clients start with a Check so we protect a known baseline. If you already know you need managed protection, start with a conversation.
Ready for protection that does not clock out?
Tell us about your business and we will recommend a Guard plan, or a Check first if that makes more sense.