Remote
RM 19,000 / month, excl. SST
- 24x7 monitoring from our SOC hub
- Named analysts, nobody on-site
- Approved containment, day or night
- Locked PDF reports every month
Managed Security Operations Centre
A SOC you can show the regulator.
We watch your security logs around the clock from our SOC hub, or place trained analysts in your office. We stop what you've approved us to stop, call you about the rest, and hand you the records that tenders, auditors and regulators ask for.
SOC yang sedia diaudit, tanpa membina sendiri.
SOC shift board · example02:17 MYT
Log sources reporting41 / 41
Firewall · blocked scans1,284 tonight
Finance laptop FIN-LT-07P2 · isolated 02:09
Microsoft 365 sign-insno anomalies
Domain controllersclean
Admin accounts changed0 outside change
P2 triaged in 4 min · laptop isolated per your approval list · IT on-call called 02:12
Who it's for
You need a SOC. You don't need to build one.
A full in-house SOC means six or more analysts, a SIEM licence and a manager. Most organisations need someone accountable for watching, and the records to prove it.
Tender bidders
The tender asks for a 24x7 SOC with named, certified personnel. We supply the methodology, CVs and a letter of commitment, and we deliver if you win.
Critical infrastructure
Designated as NCII, or supplying one? We monitor continuously and give you the incident facts you need for NACSA notification, fast.
Regulated finance
Insurers, takaful operators, money services and fintechs facing regulator expectations for continuous security monitoring.
Anyone holding personal data
PDPA now expects breaches to be reported. We notice them, and keep the records the Commissioner will ask for.
Plans
Four ways to run it.
Every plan includes one site, 30 log sources, 150 endpoints, 90 days of searchable logs, playbooks, the escalation matrix and monthly reports. See supported log sources and vendors.
Essential
RM 23,000 / month, excl. SST
- 1 SOC analyst on-site, office hours
- Critical alerts page our on-call analyst after hours
- For lower-risk estates. Not for NCII.
Standard
RM 29,600 / month, excl. SST
- 1 SOC analyst on-site by day
- 24x7 monitoring from our SOC hub
- Meets typical "24x7 SOC" tender clauses
Dedicated 24x7
RM 69,900 / month, excl. SST
- Rotating team, on-site around the clock
- For contracts that require 24x7 on-site staff
- Backup cover built into the roster
Already with Dunia Canggih NOC? Take 10% off the SOC service fee. The two services keep separate scopes, SLAs and reports.
Scope
We detect and contain. We don't do forensics.
A simplified SOC catches attacks early and stops the ones you've told us we may stop. Deep investigation, penetration testing and rebuilding systems are different services, and we say so up front.
What we do
- 24x7 collection and correlation of security logs from firewalls, identity, servers, email, EDR and cloud (full list)
- Alert triage: real or false, how serious, who and what is affected
- Investigation from approved playbooks, with AI-assisted enrichment confirmed by an analyst
- Containment from your approved list: isolate a laptop, disable an account, block an IP, quarantine an email
- Escalation to your team, and the facts you need for NACSA or PDPA notifications
- Shift logs, incident records and monthly security reports
What we don't do
- Digital forensics, malware analysis or court evidence
- Penetration testing or red teaming
- Fixing, patching or rebuilding systems
- Containment outside your approved list or written instruction
- Network uptime monitoring (that's our NOC)
How it works
Live in about 60 days.
- Week 1–2
Discovery
We list your log sources, read your tender or regulator requirements, and agree which assets are crown jewels.
- Week 2
Proposal
Plan, log sources, containment list, SLA and a fixed monthly fee.
- Day 0–35
Onboarding
SIEM deployed, logs connected, playbooks and your containment approvals signed.
- Day 25–55
Tune and test
Two weeks of tuning to cut false alarms, a ransomware tabletop with your team, and a simulated attack to prove we catch it.
- Monthly
Run and report
Report by working day 5, a service review every quarter, a tabletop every year.
What you receive
The records auditors ask for.
Service catalogue & scopeyearly
Named, vetted personnel & CVson change
Escalation matrix, call-testedmonthly
Log source coverage registermonthly
MITRE ATT&CK coverage mapquarterly
Playbooks & containment approvalsliving
Shift handover logevery shift
Incident log & P1 reportsper event
Notification fact sheetper qualifying incident
Monthly security reportmonthly
Quarterly review minutesquarterly
Tabletop exercise recordyearly
For system integrators
Bidding on a tender? Bring us in early.
We prepare the SOC section of your bid: methodology, architecture, org chart, CVs, SLA table and a letter of commitment. If you win, we sign a back-to-back subcontract that mirrors the main contract's SOC terms.
Contact
Tell us what the tender or regulator asks for.
Send the SOC clauses or audit finding, your main systems, and the hours you need covered. We reply with a proposal.
hello@duniacanggih.com