Home
/
techsearch-case-study-mdr
/
cynet-cyber-security-monitoring-incident-response-aged-care
Cynet
Cyber Security Monitoring & Incident Response for an Australian Aged Care Provider
About the Vendor Response
This page presents the response provided by Cynet to an Australian aged care organisation seeking a Managed Detection and Response (MDR) provider. The response was submitted through StrategyMix TechSearch and addresses the buyer's original requirements and qualifying questions.
Related Information
View Full buyer requirements
https://www.strategymix.com.au/techsearch-case-study-mdr/buyer-requirements-cyber-monitoring-incident-response
View Case Study and compare 8 vendor responses
https://www.strategymix.com.au/techsearch-case-study-mdr
Understand how TechSearch helps IT buyers
https://www.strategymix.com.au/techsearch
SEARCH DETAILS
Search Name:
Cyber Security Monitoring / Incident Response
Category:
Cyber Security
Budget Status:
Pending
Purchase Timeframe:
6 to 12 Months
Product Description:
I am looking for a 24x7 cyber security monitoring provider as well as cyber incident response support.
It would be helpful if the provider can utilise our existing investment in our current security monitoring tools, but there is an opportunity to onboard a more complete SIEM solution to upgrade our existing one.
I envisage that the incident response support component might be arranged on a retainer basis, with payment per incident. However, that is subject to whichever arrangement offers the most affordable solution.
VENDOR CONTACT
Name:
Thomas
Jamed
Job Title:
Territory Manager, Australia & New Zealand
Company:
Cynet
REQUEST EMAIL INTRO WITH
SOLUTION OVERVIEW
Submitted by Comans Services (with Cynet as technology partner)
Thank you for the opportunity to respond. Comans Services, in partnership with Cynet, a MITRE ATT&CK top-performing, all-in-one XDR platform with 24x7 MDR and automated response, offers a joint cybersecurity monitoring and incident response solution that closely aligns with your stated needs, particularly within aged care and not-for-profit environments where operational continuity, flexibility, and cost control are essential.
We provide:
24x7 cybersecurity monitoring through a co-managed Security Operations Centre (SOC) powered by Cynet’s XDR platform. This combines automated threat detection with expert human-led investigation, reducing alert fatigue and ensuring fast, accurate response, backed by CyAI (Cynet’s predictive AI engine) and independently validated MITRE ATT&CK results demonstrating 100% visibility and analytic coverage without tuning.
Support for your existing tools: We can ingest and correlate data from CrowdStrike, Mimecast, Netskope, and Graylog, preserving your current investments. Our solution can operate alongside your existing SIEM or provide a pathway to a more scalable, fully integrated replacement, leveraging Cynet’s native Centralised Log Management/SIEM capabilities where this is commercially and technically appropriate.
Flexible incident response arrangements: We offer retainer-based incident response services with defined inclusions, or a pay-per-incident model, depending on which structure offers the best value and predictability for your organisation. For higher-impact scenarios such as ransomware, we can also leverage Cynet’s ransomware warranty-backed protections where suitable, adding an extra layer of financial assurance.
Sector-specific experience: We have delivered cybersecurity and monitoring services to aged care and education clients, including Nazareth College, where our monitoring program reduced high-risk detections by 67 percent within the first month of operation. Our approach is designed to strengthen security posture while keeping internal teams supported and informed. Independent economic analysis (Forrester TEI) has also shown that consolidating onto Cynet’s all-in-one platform can materially reduce tooling, SOC and breach-related costs while improving security outcomes.
We are happy to tailor both the service and commercial model to best suit your operational requirements, existing technology landscape, and budget expectations.
QUALIFYING QUESTIONS
Q1.
Can you ingest and correlate data from CrowdStrike, Mimecast, Netskope, and Graylog?
Yes — Comans Services, leveraging Cynet’s all-in-one security platform, supports log ingestion and correlation from all listed sources via Syslog/API. We enrich and unify data from CrowdStrike, Mimecast, Netskope, and Graylog with native telemetry across endpoints, users, networks, email, and cloud — giving you a consolidated, high-fidelity threat view.
This approach is particularly effective in aged care and NFP environments, where existing tools must deliver more value without overhauling the tech stack, and can be extended with Cynet’s Centralised Log Management to meet compliance and retention requirements where needed.
Q2.
Can you enrich alerts with threat intelligence or contextual data from these platforms?
Yes. We attach source platform metadata (e.g. CrowdStrike detection names, Mimecast message IDs, Netskope policy hits) directly to incidents in the Cynet console. Playbooks can also query third-party APIs to pull real-time threat intel or enrichment data, and automatically append it to alerts — giving context and clarity when it matters most. In addition, Cynet’s CyOps team overlays global threat intelligence and behavioural context, so each incident includes both local and external insight to support confident decision-making.
Q3.
How do you prioritise alerts and reduce false positives?
We use Cynet’s CyAI engine and XDR correlation to surface only high-fidelity alerts. This AI-led triage suppresses noise and prioritises real threats, reducing false positives by up to 90% and contributing to Cynet’s top-tier performance in independent MITRE ATT&CK evaluations. Behind this, Comans’ SOC team (CyOps Platinum) investigates and validates alerts 24x7 — ensuring aged care environments with lean IT teams only see actionable incidents.
In recent engagements with not-for-profits and schools, we’ve used this approach to reduce high-risk detections by up to 67% in the first month.
Q4.
Do you offer services to enhance or replace Graylog with a more scalable SIEM?
Yes. Our service can either complement Graylog (e.g., by ingesting logs and overlaying detection and response) or replace it entirely with an integrated XDR/CLM platform. We support hybrid models — keeping Graylog as a log lake while using our platform for correlation and response — or helping you transition fully at your pace, providing SIEM-like visibility and compliance reporting without the overhead of building and tuning a traditional SIEM stack.
We’ve successfully modernised SIEM environments for organisations like Nazareth College, reducing operational overhead while improving visibility and incident response times.
Q5.
Do you offer retainer-based IR services or on-demand support?
Yes. Comans Services offers both models — flexible retainer-based IR (via CyOps Platinum) or ad-hoc, pay-per-incident support. Our 24x7 team provides real-time investigation, guided remediation, threat hunting, and monthly reporting. We co-manage incidents with your internal team to ensure response is swift, collaborative, and in line with sector-specific risks. Retainers can also incorporate proactive threat hunting, readiness exercises and playbook development, so you are better prepared before a major incident occurs.
For aged care and NFP clients, this approach balances budget predictability with critical coverage — ensuring help is available during security events without unnecessary overhead.
Detailed MITRE, AI and ROI evidence (including Cynet’s MITRE ATT&CK evaluation results, AI story and Forrester TEI study) can be provided as supporting material with a full proposal.