Sentinel

Who it is for

Organisations with a regulator, auditor, insurer or customer that expects evidence of a security programme, not just controls.

Sentinel is for a business that has to prove its security posture, not just have one. It includes everything in Guardian, then adds vCISO leadership, a compliance assessment and management platform, an incident response platform with tabletop exercises, semi-annual disaster recovery testing and Microsoft 365 data loss prevention. Controls that are add-ons under Guardian — zero trust application control, a password vault, SASE, custom mobile device policies — are included. Scope is set per engagement because no two compliance obligations look the same.

Inside the rate

• Everything in Guardian: monitoring, patching, help desk, identity, 24×7 detection and response
• vCISO leadership that owns the security programme and speaks to your auditor
• Compliance assessment and management platform with continuous evidence collection
• Incident response plan, hosted response platform and tabletop exercises
• Disaster recovery testing twice a year, with results documented
• Microsoft 365 data loss prevention policies configured and reviewed
• Zero trust application control, password vault, SASE and mobile device policies included
• Backup and disaster recovery as a service for servers and workstations included

What it does not do

• The certificate itself. Sentinel builds and runs the programme and gathers the evidence; the audit opinion and any certification come from your assessor.
• Incident remediation beyond the immediate response. The same boundary as Guardian applies; cleanup is time and materials.
• Custom software development or secure code review of your own applications.
• Migration projects, which are scoped and quoted separately.