Level 3 Enterprise Incident Management, Problem and Change Management, Intrusion Detection using market tools and Incident Escallation - Advanced Security Incident and Problem Management (incl. Root Cause Analysis) - Customer specific definition of monitoring scope, monitoring concept and sizing - Collection and aggregation of monitoring data to identify security events and potential incidents based on defined correlation rules - Refinement of correlation rules, detection patterns and sensor types - Input to SOC / CERT (MSSP service or customer organization)