Whilst the lights go out in the offices after work, the IT systems remain accessible and are therefore also vulnerable to attack. Cybercriminals keep no office hours. They rely on automated attacks, stolen credentials and known vulnerabilities. The situation becomes especially critical when suspicious activity goes undetected outside working hours. Anyone still relying on a firewall and antivirus software alone is taking an unnecessary risk. The answer lies in an approach that treats security no longer as a product, but as a continuous service: Managed Security.
For years, IT security strategies followed a clear pattern. Organisations protected their networks with firewalls, relied on traditional antivirus software and kept everything regularly updated. This model was manageable as long as IT largely stayed within the company’s own data centre. But the reality has shifted: cloud services, mobile workplaces and external partner access have all but dissolved the traditional network perimeter.
A common misconception is to view IT security as a one-off task. A new solution is implemented, an audit is carried out – and then, supposedly, calm returns. In practice, however, security is a dynamic process. The threat landscape changes constantly, new vulnerabilities emerge every day, and existing safeguards need to be reviewed continuously.
Cyberattacks do not have to be highly sophisticated to succeed. Attackers frequently exploit known vulnerabilities, stolen credentials or legitimate system tools to bypass security controls. Automation and artificial intelligence can further accelerate such attacks. At the same time, every IT environment generates an enormous volume of security-relevant data. That data is only of value if suspicious activity within it is detected around the clock, correctly interpreted and addressed in good time. This ongoing task can often only be covered in-house at considerable expense – not least because of the skills shortage and the need for a 24/7 presence.
In cybersecurity, “dwell time” is a key metric: it describes the period during which attackers remain undetected within an IT environment. The longer an attack goes unnoticed, the more opportunity attackers have to compromise further systems, steal login credentials or steal data. Modern security solutions are increasingly able to detect suspicious activity on their own, but without continuous monitoring and expert analysis, key warning signs go undetected. Outside business hours in particular, valuable time is lost this way.
Managed Security significantly shortens this dangerous detection window. The principle: an external team of experts monitors your infrastructure around the clock. Modern XDR technology analyses endpoints, servers and networks, looking for anomalies rather than simply waiting for known threats. If, for example, an unknown process on a workstation attempts to modify an unusually large number of files or establish connections to suspicious servers, the security technologies in place trigger an alert. Experienced security specialists review such anomalies around the clock, assess the threat and, where necessary, initiate appropriate countermeasures.
A Managed Security service takes on the tasks that cost the most time and expertise day to day: detecting anomalies, classifying them and responding to them. These tasks form part of the NIST Cybersecurity Framework, which covers the entire IT security lifecycle through six functions – from identifying risks and prevention through to recovery after a security incident.
In the day-to-day operation of a Security Operations Center (SOC), three pillars are central:
Three terms come up frequently in connection with Managed Security. EDR and XDR describe technologies for detecting and investigating threats, while MDR refers to the service in which experts operate and evaluate such technologies:
Opting for Managed Security is a logical organisational step: IT security is no longer viewed as a time-consuming sideline for the internal IT team, but established as a professional service. A key advantage here is the collective intelligence of a service provider: a partner like MTF supports numerous clients across a wide range of industries. Insights from security incidents and current attack patterns can be incorporated into the monitoring of other client environments. Whereas an individual company focuses primarily on its own IT, a Managed Security service gives it the benefit of the combined expertise and experience of a specialised security team.
Predictable costs instead of an in-house security team
Alongside the security benefits, the financial aspect plays a central role. Setting up in-house security for 24/7 operation requires substantial investment in technology, as well as several specialists working in shifts. At a time of skills shortages, this is barely realistic for SMEs.
Managed Security makes the ongoing cost of security monitoring predictable: MTF offers the service at a fixed price, in three variants that can be tailored to your risk and budget profile. At the same time, companies benefit from specialist expertise without having to build their own 24/7 security team. Detecting and containing threats early can also reduce the risk of costly business disruption.
Compliance, transparency and trust
Regulatory requirements are also playing an increasingly important role. The Swiss Data Protection Act (DSG) requires organisations to take appropriate technical and organisational measures to protect personal data. Data security breaches likely to result in a high risk to the personality or fundamental rights of the individuals concerned must be reported to the FDPIC as quickly as possible. Continuous security monitoring can help to detect incidents at an early stage.
Regular reports provide transparency about the threats detected and the measures taken. This documentation can support companies during internal reviews and audits, as well as in their dealings with clients, partners or insurers, though it does not replace a comprehensive assessment of legal and contractual requirements.
Refocusing on your core business
Ultimately, Managed Security is about regaining operational flexibility. It relieves the internal IT team of continuous security monitoring, freeing up more resources for day-to-day operations, support and the ongoing development of the company’s IT. At the same time, organisations have the reassurance that their connected systems are monitored outside business hours too, and that measures can be initiated when threats are detected. Managed Security does not, however, replace the fundamentals: firewalls, backups, regular updates and a security-aware workforce remain essential.
MTF supports SMEs with Managed Security services and its own Security Operations Center (SOC). Our security specialists monitor your IT systems around the clock, detect suspicious activity and initiate countermeasures where needed. With three service variants, security monitoring can be tailored to your company’s requirements and budget.
Would you like to know how your IT can be protected around the clock? Our security experts will be glad to advise you and show you which Managed Security service is the right fit for your organisation.