Short answer
Standard Sophos MDR onboarding with FirstNet typically takes two to four weeks. Integrating XDR or next-generation SIEM telemetry usually takes four to eight weeks, depending on how many data sources are connected, and a full next-generation SIEM transformation that replaces a legacy SIEM typically takes eight to 16 weeks.
In detail
Onboarding follows six steps:
- Discovery and architecture review
- A deployment plan agreed with you
- Telemetry sources validated and provisioned
- Sophos MDR onboarding and escalation runbook handover
- FirstNet's incident response runbook agreed: how notifications are received, who mobilises and the remediation playbook
- Handover to FirstNet's managed-services team
The timeline depends mostly on telemetry breadth: how many endpoints, firewalls, identity providers and cloud platforms such as Microsoft 365, Azure, AWS and Google Workspace are connected. Existing Microsoft Defender telemetry can be ingested rather than replaced.
If you also want Sophos Secure AI for AI governance, that rollout typically takes two to six weeks, depending on how many AI tools are in scope.
Source: FirstNet Managed Cybersecurity Services service page →
Didn’t answer your question?