Short answer
No. Sophos MDR runs the 24/7 SOC (security operations centre) layer that monitors, hunts and alerts around the clock. FirstNet's Incident Response team acts on those alerts with you, and FirstNet also handles onboarding, reporting and escalation.
In detail
Who does what:
- Sophos MDR: 24/7 detection, threat hunting and analyst-led response across your systems.
- FirstNet support desk: receives the Sophos alert.
- FirstNet Incident Response: works with you to contain the threat, fix it and recover, following a runbook agreed at onboarding.
- FirstNet's wider service: onboarding, setup, customer success, compliance reports and escalation.
How much FirstNet does depends on your support tier. Standard covers incident response on Sophos alerts. Enhanced adds a named customer-success contact, more incident response, longer telemetry retention and more reports. Premium adds extended incident response, with on-site remediation support where it applies. It also adds executive reports and dedicated runbook engineering.
FirstNet is a Sophos MSP and Titanium Partner, with direct escalation into Sophos when an issue needs it.
Your runbook sets who in your business is told and who steps in. So agree it with care at onboarding.
Source: FirstNet Managed Cybersecurity Services service page →
Didn’t answer your question?