Question 1

How quickly can Merrow respond to an active incident?

Accepted Answer

Retainer clients have a contracted arrival SLA agreed at onboarding. Non-retainer engagements are handled case by case — contact us directly and we'll be upfront about realistic timing.

Question 2

Do you resell the security tools you recommend?

Accepted Answer

No. Merrow doesn't take reselling margin on third-party tooling. If the right tool for your environment isn't one we resell, that's still what we'll recommend.

Question 3

Can you work with our existing SIEM and tools?

Accepted Answer

Usually, yes. Our SOC-as-a-Service model is built on your existing stack wherever technically possible, rather than forcing a migration to our preferred platform.

Question 4

Which compliance frameworks do you support?

Accepted Answer

ISO 27001, Cyber Essentials Plus, SOC 2, DORA and NIS2, with practical gap analysis mapped to each framework's actual operational requirements.

Question 5

Is your forensic work admissible in legal or regulatory proceedings?

Accepted Answer

Our digital forensics work is conducted to evidential standard with documented chain-of-custody handling, specifically so findings hold up if tested externally.

Question 6

Is on-call work compensated?

Accepted Answer

Yes. Incident response is rostered and compensated like the emergency service it functionally is — it isn't treated as an unpaid badge of honour.

Question 7

Do SOC analysts only do monitoring work?

Accepted Answer

No. Analysts rotate between SOC monitoring and red-team/offensive work on a structured cadence, to stay current on real attacker behaviour rather than just alert-rule maintenance.

Grouped by who's asking.

Prospective Client

Compliance & Legal

Careers