Managed cybersecurity with 24/7 monitoring, threat detection, and the documentation insurers ask for.

What does 'managed cybersecurity' actually include?

NHM's managed cybersecurity covers endpoint detection and response (EDR) on every covered device, managed detection and response (MDR) with human-led triage, email security (separate page), phishing protection, ransomware prevention, vulnerability scanning, MFA enforcement, security awareness training, and the compliance documentation auditors and cyber insurers ask for.

The two acronyms that come up most: EDR is the technology - the agent on each device that watches for suspicious behavior. MDR is EDR plus a 24/7 human team reviewing the alerts. Both are in the plan. We run them. The cost is bundled into managed IT pricing tiers, with add-on availability for environments that need additional coverage.

Related: Defense in Depth (EDR/MDR), Email Security

Is this proactive or reactive, and what happens during a real incident?

Proactive. The whole point of managed cybersecurity is to catch things before they become incidents. The 24/7 monitoring stack is watching every endpoint for behavior that matches ransomware, credential theft, lateral movement, and the other patterns that precede a real incident. When the system flags something, an engineer triages it; if it is real, we contain it.

When an actual incident happens - which is rare, and is why the monitoring exists - the response sequence is documented: triage, containment, eradication, recovery, lessons learned. We have run this for ransomware, for compromised credentials, for an attacker who got in through a third-party vendor. The monthly report shows what was caught and what was done; the after-action report after an incident shows what we will do differently next time.

Related: Ransomware Recovery Planning

What does it cost and does it satisfy cyber-insurance and HIPAA requirements?

Plans run $100-$300 per user per month across three tiers. The Cybersecurity bundle is in Standard and Comprehensive; smaller clients can add cybersecurity as a focused package. Quotes are written after a discovery call.

For cyber-insurance renewal: most carriers now require evidence of MFA enforcement, EDR coverage on every endpoint, email security beyond the platform default, verified backup with tested restore, and security awareness training. NHM's deployment satisfies all of those, and we produce the documentation insurers ask for at renewal time. For HIPAA: the technical safeguards in 45 CFR 164.312 line up with what we deploy - access control, audit controls, integrity, person or entity authentication, transmission security. The policy, procedure, and workforce-training layers are separate and live on the healthcare page.

Related: Cyber-insurance Readiness, Healthcare IT, Pricing

How is NHM's cybersecurity different from a national SOC or MDR vendor?

Two differences matter. First, the people. NHM's monitoring is delivered by NHM staff - the same engineers who know your environment, who pick up the phone when you call, who will be onsite if the issue requires it. National SOC vendors are built around ticket queues and tiered analysts; the people watching your alerts are not the people you talk to.

Second, the scope. National MDR vendors sell a stack - their EDR, their SIEM, their threat-intel feed. NHM works with what you have and adds the parts that are missing. If you are already running Defender for Business and need a 24/7 triage team, we wrap around it. If you are starting from zero, we pick the stack that fits your environment and budget. That flexibility is what you give up when you go to a single-vendor national provider.

How do I get a security review and what does it cost?

Free discovery call - 30 minutes. We will look at your current security stack, the controls you have, the ones you are missing, and what cyber-insurance or compliance requirements you are working against. If you move forward, we run an environment review, document the gaps, and propose a phased rollout that lands the critical controls first.

Related: Contact NHM