Onboarding for Taegis ManagedXDR

onboarding managedxdr

Overview ⫘

Prior to onboarding, Secureworks will activate your Service by provisioning access to your instance of Secureworks® Taegis™ XDR, which will also provide you with access to: 1) online documentation; and 2) instructions to access and deploy the Secureworks® Taegis™/Red Cloak™ Endpoint Agent.

XDR is designed to support self-guided onboarding. For an overview on self-guided onboarding, see the Secureworks® Taegis™ ManagedXDR Onboarding Overview. Together with guidance from your Customer Success Manager (CSM), this onboarding overview will help you take control of and complete your onboarding process.

Secureworks Personnel ⫘

Secureworks will provide additional personnel and support during the onboarding process. Throughout the process, it is important to understand the roles and responsibilities for you and Secureworks, as well the Secureworks points of contact during the onboarding process. For more support in these areas or additional training of your teams, Secureworks offers a suite of professional services, including Premium Onboarding for ManagedXDR.

Customer Success Manager (CSM) ⫘

The CSM will partner with you and serve as your primary operational point of contact during onboarding. The CSM will coordinate with the Secureworks Solutions Engineer and sales team to review and validate all information collected during the pre-sales process, including the proposed architecture and solution map, as applicable. The CSM is available to guide you through the process of setting up supported integrations and tracking deployment progress until transition to steady state.

Onboarding Time Frame ⫘

The graphic and table below indicate the phases, milestones, responsibilities, and resources. The time frame is approximate; actual time required varies from customer to customer and depends primarily on the speed at which each customer deploys data collectors and endpoint agents. After deploying at least 40% of your Licensed Volume to endpoints and acknowledging completion of the training videos within parts one and four of the ManagedXDR Onboarding Overview, Secureworks will schedule and conduct an Initial Baseline Review with you.

For more information on the phases and steps required for onboarding, see the ManagedXDR Onboarding Overview.

Onboarding Time Frame Graphic

Phase	Secureworks Responsibilities	Customer Responsibilities	Resources
Activation	Send activation e-mail with activation instructions and credentials (billing for XDR and ManagedXDR commences)	Activate XDR and ManagedXDR	Onboarding Specialist/CSM
Getting Started	Schedule and conduct commencement and overview teleconferences (Onboarding Specialist/CSM) Provide Taegis/Red Cloak endpoint agent	Set up XDR Attend scheduled teleconferences Complete the training videos within part one of the ManagedXDR Onboarding Overview	Progress checks with onboarding team 24x7 access to security analysts through XDR chat, Ask-an-Expert, and toll-free telephone Access to XDR support agents Response, not limited by time or number of incidents, for in-scope environment Access to latest Secureworks CTU team Threat Intelligence reports
Deploy Endpoint Agent and Connect Data Sources	Schedule and conduct deployment progress review as needed (Onboarding Specialist/CSM)	Deploy data collectors Deploy endpoint agents (minimum of 40% of Licensed Volume)* Attend scheduled teleconferences	Progress checks with onboarding team 24x7 access to security analysts through XDR in-application chat and toll-free telephone Access to XDR support agents Response, not limited by time or number of incidents, for in-scope environment Access to latest Secureworks CTU team Threat Intelligence reports
Readiness and Steady State	Schedule and conduct Initial Baseline Review (Onboarding Specialist/CSM)	Finish deploying endpoint agents to endpoints, up to your Licensed Volume* Attend scheduled teleconferences Complete the training videos within part four of the ManagedXDR Onboarding Overview	24x7 monitoring and investigation of threats detected by XDR Threat response actions as approved by you Threat hunting on a monthly basis across your environment for relevant indicators of compromise and tactics Quarterly Update with CSM 24x7 access to security analysts through XDR in-application chat and toll-free telephone Access to XDR support agents Response, not limited by time or number of incidents, for in-scope environment Access to latest Secureworks CTU team Threat Intelligence reports

Onboarding Time Frame Table

*While Secureworks will consider onboarding complete after 40% deployment of Licensed Volume, Secureworks highly recommends that you deploy the Taegis/Red Cloak Endpoint Agent (or other compatible endpoint agent) on all endpoints—up to your Licensed Volume—to maximize the effectiveness of the ManagedXDR service. Until deployment of Licensed Volume on all endpoints is completed, your organization understands, agrees, and accepts the risk that the ManagedXDR service will have reduced service capabilities for your environment.

Suggested Resources ⫘

As part of your onboarding plans to ensure productive onboarding and integration of the service in your security practice, listed below are the roles we suggest that you include from your organization.

Roles	Responsibilities
Security Engineer/Analyst	Management of XDR, application users, supported log source integrations, and event handling
System Administrator	Deployment of endpoint agent and XDR Collector, and hypervisor configuration
Network Engineer/Administrator	Configuration of logging for supported network devices
Security Manager	Integration of XDR into your organization's security practice and operating processes
Project Manager	Initiating, planning, executing, controlling, and closing the work of your team in alliance with the Secureworks project management resource, to achieve activation of XDR and the ManagedXDR service

Customer Responsibilities ⫘

Below are your primary responsibilities during onboarding to ensure a smooth transition from initiation to steady state. Additional responsibilities may arise as needed to support aspects of the implementation that are unique to your specific information systems and environment.

Provide contact information for initial XDR Administrator (Tenant Admin) registrant to be used by Secureworks to provision the XDR application.
Create user accounts for additional users of XDR and maintain all user accounts, ensuring that contact information for each user is complete and accurate.
Configure and manage hypervisor resources to support the deployment of Taegis™ XDR Collector.
Configure and maintain supported on-premises log source and cloud integrations in accordance with XDR log format requirements.
Deploy the XDR Collector and successfully configure at least one supported integration.
Deploy compatible Endpoint Agents on endpoints. Once at least 40% of Licensed Volume is deployed, the transition to Steady State can begin.
Respond to Secureworks communications in a timely manner and ensure attendance of the necessary customer POCs for all teleconferences to ensure timely completion of onboarding.

Note

If you choose to authorize Proactive Response Actions to allow ManagedXDR analysts to perform actions in your environment on your behalf, it is your responsibility to configure and maintain supported connectors and to set up Response Actions and other playbooks. For more information about authorizing and configuring Response Actions, see Configuring Connectors and Proactive Response Actions.