Start with the customer requirement
Set out the environments you need to cover: cloud services, networks, endpoints and any existing security tools. Separate a live customer opportunity from a wider plan to launch a service. A clear starting point makes it easier to compare proposals that address the same requirement.
- Which customers or environments are in scope?
- Which security platforms and data sources are already in place?
- Is this a new service, a replacement or an extension of an existing service?
Make the division of responsibilities explicit
Monitoring, investigation and response are connected activities, but a proposal should explain who performs each one. Ask how alerts are assessed, what reaches your team and which actions need customer permission. Agree escalation contacts and a route for situations that fall outside the normal service scope.
- What does the analyst team investigate?
- Who can authorise containment or other response actions?
- What coverage and escalation arrangements are included?
Understand the white-label experience
Your customer relationship should remain clear from the first conversation through to reporting. Discuss whose branding appears on reports, how the service is introduced and who joins customer meetings. Work through an example enquiry or incident so the hand-offs are understood before onboarding.
- How will reports and customer communications be presented?
- Who handles service questions and commercial discussions?
- How are your team and the delivery team kept informed?
Compare onboarding and commercial scope
Ask what information, access and preparation are needed to begin. Compare proposals against the same assumptions, including supported integrations, reporting, coverage and responsibilities. Record exclusions and dependencies rather than relying on a short feature list.
- What must be ready before onboarding starts?
- What is included in the proposed price and what changes the scope?
- How will changes, reviews and the end of the service be handled?
Bring the brief to us.
White Label Cyber brings enterprise SOC expertise to channel partners, with service leadership drawing on more than 10 years in enterprise SOC environments. Tell us about your customer or service plans and we can discuss technical fit, delivery responsibilities and next steps.
Explore White-label MDR ↗