SOC and MDR for Thai Organisations, in the Hours You Choose
SOC and MDR for small Thai IT teams: 8×5 to 24×7 coverage, alerts on Email, Teams, LINE or Telegram, data stored in Thailand, and what the law really requires.
Does Thai law require an organisation to have a SOC?
No Thai law requires a 24×7 SOC directly. What is required is keeping computer traffic data for at least 90 days under Section 26, reporting a personal-data breach to the PDPC without delay and, where feasible, within 72 hours of becoming aware of it (unless it poses no risk to people's rights and freedoms), and, for CII, reporting threats that significantly affect their systems to the NCSA within 24 hours of detection or occurrence while keeping monitoring mechanisms sized to risk.
What is the difference between zcrSOC and zcrMDR?
zcrSOC is a managed SOC service: Essential covers alert acknowledgement, triage and monthly reporting on zcrSIEM, and Response adds coordinated response, escalation and IR support on zcrSIEM and zcrSOAR. zcrMDR focuses on detection and alerting: Essential provides alert triage, monthly reporting and a customer portal, and Complete adds active response and incident-response support.
Do I need zcrLog before I can use zcrSIEM?
No. zcrSIEM ingests its own sources and carries its own capacity in every package. zcrLog is for compliance log retention; use either one alone or both together.
Where is our data stored?
The SaaS packages of zcrLog, zcrSIEM and zcrSOAR store customer data in Thailand. To keep data on your own systems, choose a VM or on-premise deployment; zcrLog is also available as a hardware appliance.
How do I buy a SOC or MDR service?
The services are delivered through approved partners. The partner signs the contract and prices the agreed scope. Contact our team and we will help you choose the right service and partner for your organisation.