VERCOD · VNC
Cybersecurity for Security Control Centers (VNC)
For licensed security control center operators seeking clearly defined, contract-based support for their information systems.
VERCOD acts as an external cybersecurity and information-security contractor. It does not take over licensed private-security operations, alarm-event management, or the VNC’s operational responsibilities. These functions and responsibilities remain with the licensed client.
Request VNC SupportAgreed areas of support
- Information and cyber risk assessment.
- Server, workstation, and network reviews.
- Vulnerability and patch management.
- SIEM: collecting and correlating security events.
- EDR: endpoint detection and response.
- MDR: managed detection, analysis, and response within an agreed scope.
- Firewalls, VPNs, and access management.
- Backups and recovery verification.
- Incident response and operational recovery plans.
- Consulting, documentation, and reporting.
Tools are not the same as a managed service
SIEM correlates logs and events; EDR monitors endpoints and enables agreed response actions. MDR combines people, processes, and tools to handle detections. Installing SIEM or EDR alone does not provide MDR, continuous monitoring, or guaranteed response times.
Packages defined by an individual proposal
VNC CORE
Visibility into risks, systems, and baseline protective measures.
- Initial assessment and scoped inventory
- Access, patching, and backup review
- Prioritized recommendations and baseline documentation
Individual quotation
Request VNC SupportVNC ADVANCED
Extended detection and agreed handling of security events.
- Everything in CORE
- Agreed SIEM and EDR integration
- Detection handling and reporting during agreed service hours
Individual quotation
Request VNC SupportVNC RESILIENCE
Integrated incident readiness and operational recovery.
- Everything in ADVANCED
- Agreed MDR service and escalations
- Recovery tests, incident scenarios, and plan improvements
Individual quotation
Request VNC SupportA package is a starting point, not an automatic guarantee. Covered systems, tool licenses, service hours, authorization, notifications, response times, and SLAs are defined in the contract. 24/7 monitoring is not included by default.
| Area | CORE | ADVANCED | RESILIENCE |
|---|---|---|---|
| Assessment and priorities | Yes | Yes | Yes |
| SIEM / EDR integration | By agreement | Agreed scope | Agreed scope |
| MDR and escalations | Separate | Separate | Contractual |
| Recovery and incident exercises | Review | Plan | Agreed tests |
| Hours / response times / SLA | Contractual | Contractual | Contractual |
Authorization and safe scope come first
- Identify systems, critical processes, client obligations, and permitted access.
- Agree confidentiality, data handling, actions, contacts, and escalations.
- Perform agreed reviews or integrations without taking over licensed security operations.
- Report findings, priorities, and contractually agreed follow-up.
Legal context and responsibilities
Slovenia’s ZZasV-1 governs private security; licensed VNC obligations remain the client’s. ZInfV-1/NIS2 applicability depends on the particular entity, activity, and statutory criteria, not simply on operating a VNC. Personal data processing follows GDPR and ZVOP-2 with defined roles and necessary agreements. ISO/IEC 27001 may serve as a reference framework; this is not a claim that VERCOD or the client is certified. This page is not legal advice or a compliance guarantee.
Frequently asked questions
Does VERCOD take over VNC operations?
No. Licensed private-security services and operational VNC management remain with the client. VERCOD provides only the agreed cybersecurity support.
Is 24/7 monitoring included?
Not automatically. Coverage, authorization, response times, and SLAs require an express contractual agreement.