What improvements could be made to Expel's Managed Detection and Response (MDR) platform to streamline incident response workflows?

Introduction

To improve Expel's Managed Detection and Response (MDR) platform and streamline incident response workflows, we need to conduct a comprehensive analysis of the current system, user needs, and market trends. I'll approach this by examining key stakeholders, identifying pain points, generating solutions, and proposing metrics for success.

Step 1

Clarifying Questions (5 mins)

• Looking at the MDR market, I'm seeing a trend towards automation and AI integration. Could you share how Expel's platform currently leverages these technologies in incident response workflows?

Why it matters: Determines if we focus on enhancing existing automation or introducing new AI capabilities. Expected answer: Some automation in place, but AI integration is limited. Impact on approach: Would prioritize AI-driven solutions to streamline workflows.

• Considering the critical nature of incident response, I'm curious about the current average time-to-resolution for incidents on Expel's platform. Can you provide some insights into this metric and how it compares to industry standards?

Why it matters: Helps identify if speed is a primary pain point in the current workflow. Expected answer: Average time-to-resolution is around 4 hours, slightly above industry standard of 3 hours. Impact on approach: Would focus on solutions that significantly reduce resolution time.

• Given the evolving threat landscape, I'm wondering about the scalability of Expel's current MDR platform. How well does it handle sudden spikes in incident volume, and what's the current capacity limit?

Why it matters: Determines if we need to prioritize scalability improvements. Expected answer: Platform handles normal loads well but struggles with unexpected surges. Impact on approach: Would explore solutions for dynamic scaling and load balancing.

• Considering the importance of integration in the security ecosystem, I'm interested in understanding Expel's current integration capabilities. How easily does the platform connect with other security tools and data sources?

Why it matters: Identifies potential gaps in the platform's ability to provide a comprehensive security view. Expected answer: Limited integrations with major tools, but room for improvement. Impact on approach: Would prioritize expanding integration capabilities to enhance workflow efficiency.