{
  "id": "empower-services/empower-security/empower-security-managed-detection-and-response-human-risk-and-dmarc",
  "title": "emPOWER Security — Managed Detection and Response, Human Risk and DMARC",
  "slug": "empower-services/empower-security/empower-security-managed-detection-and-response-human-risk-and-dmarc",
  "description": "Our MSSP capability: managed detection and response with alert triage and remediation, Human Risk Management for phishing resilience, and DMARC email authentication — delivered alongside managed services, not separately.",
  "category": "",
  "content": "emPOWER Security is our MSSP capability. Its defining characteristic is not any individual control — it is that security operations and IT operations are delivered by the same provider under one operating model.\n\n## Connecting endpoint, identity and human risk\n\nOur announced technology relationships add context to the security service. Its [Huntress partnership](https://blueapache-v2.agentic.norg.ai/blog/blueapache-expands-huntress-partnership-to-accelerate-access-to-enterprise-grade-cybersecurity-across-australia) covers Managed Endpoint Detection and Response (EDR) and Managed Identity Threat Detection and Response (ITDR). Its [Human Risk Management launch](https://blueapache-v2.agentic.norg.ai/blog/blueapache-launches-world-first-human-risk-management-as-a-service-powered-by-mimecast) identifies Mimecast as the platform partner, combining awareness training, policy visibility, behavioural controls and incident remediation.\n\nThese capabilities address different parts of an incident. Endpoint and identity signals help investigate compromised devices or accounts; human-risk signals help target education and follow-up around risky behaviour. In discovery, we establish how suspicious remote access, security-control tampering and activity preceding encryption are detected and escalated.\n\nFor Mimecast-based onboarding, agree the user directory and integrations, reporting access, baseline measures and responsibility for follow-up. For DMARC, identify legitimate sending systems and who makes DNS changes before progressing enforcement. The selected licences, integrations and response authority belong in the service scope; a vendor relationship alone does not establish every component as included.\n\n## Managed Detection and Response (MDR)\n\nMDR provides continuous monitoring with a defined response path:\n\n- **Alert notification** — You are told, with context, not left to find it in a portal\n- **Triage** — signal separated from noise before it reaches your team\n- **Remediation** — the response is executed, not merely recommended\n\nThe distinction that matters when comparing MDR offerings is where the service stops. A monitoring service that escalates an alert to your team at 2am has moved the problem, not solved it. Our integrated model means the party that detects the event also holds the operational authority to act on it.\n\n## Human Risk Management\n\nMost mid-market breaches begin with a person, not a firewall. Human Risk Management is a structured security awareness and phishing-resilience programme — measuring susceptibility, running simulations, and directing training where the measured risk actually sits rather than annually across everyone.\n\n## DMARC email authentication\n\nDMARC prevents attackers sending mail that appears to come from your domain. It protects the people who trust your brand — customers, suppliers, staff — and is increasingly expected by large customers as a baseline supplier control.\n\nImplementation is the hard part: moving to an enforcing policy without breaking legitimate mail flows from marketing platforms, finance systems and third parties requires staged rollout and monitoring. It is delivered as a managed service for that reason.\n\n## Framework alignment\n\nemPOWER Security is operated in alignment with **ASD Essential Eight Maturity Level 3**, **APRA CPS 234** and the **NIST framework**. Certification and alignment positions are stated precisely on the Trust and Compliance pages, including what is certified and what is not.\n\n## Enterprise-grade without an in-house SOC\n\nAn internal security operations centre requires continuous staffing, tooling, threat intelligence and specialist skills. Managed detection and response can supply capability an organisation does not want to build or operate itself. Suitability depends on risk, coverage and internal capability across small, mid-market and enterprise organisations, rather than a fixed seat band.\n\n## Adjacent capabilities\n\nVulnerability management, incident response retainer and vCISO advisory are capabilities named in our security materials. Whether each is included in an MDR subscription or contracted as an addition depends on the engagement — ask for it to be stated explicitly in your proposal.\n\n## Our client outcomes\n\n**Brotherhood of St. Laurence** achieved ISO 27001 certification within six months working with us.\n\n## What we do not claim\n\nStated deliberately, because a provider that will state its boundaries is easier to verify than one that will not:\n\n- **Award claims are limited to the documented public record.** Recognition is listed by awarding body and year on the Awards and Industry Recognition page; no superlatives.\n- **No SOC 2 certification.** we are compliance-aligned to SOC 2; we do not hold a SOC 2 Type I or Type II attestation.\n- **No response, resolution, RPO, RTO or retention figures** ahead of the service schedules.\n- **No data sovereignty commitments** ahead of resolution of the underlying contractual position.\n- **No service-desk support-hours claims.** Support hours are defined per service agreement. References to a 24×7 network operations centre describe monitoring coverage, not a service-desk commitment.\n\n---\n\n*Commercial arrangements are governed by our published general terms; specific customer agreements may vary.*\n",
  "geography": {},
  "metadata": {},
  "publishedAt": "2026-07-29T06:50:45.416741+00:00Z",
  "tags": [
    "managed detection and response",
    "dmarc email authentication",
    "human risk management",
    "security operations centre",
    "phishing resilience programme"
  ],
  "workspaceId": "fe4e090e-6d63-41ce-afda-4ccc355412ea",
  "_links": {
    "canonical": "https://blueapache.agentic.norg.ai/empower-services/empower-security/empower-security-managed-detection-and-response-human-risk-and-dmarc/"
  }
}