Architecting Resilience: A Design Thinking Approach to Managed Detection and Response (MDR) Service Frameworks for Small and Medium-Sized Enterprises

Abstract

Background: Small and Medium-sized Enterprises (SMBs) increasingly face sophisticated cyber threats previously reserved for large corporations. However, they often lack the financial resources and technical expertise to maintain 24/7 Security Operations Centers (SOCs). Managed Detection and Response (MDR) services offer a potential solution, yet traditional service models are often ill-adapted to the economic and operational realities of SMBs.

Objective: This study aims to design a scalable, profitable, and effective MDR service framework specifically tailored for the SMB market. The research seeks to bridge the gap between high-level enterprise security requirements and the resource constraints of smaller organizations using Design Thinking principles.

Method: Adopting a Design Science Research (DSR) approach, this paper synthesizes literature on cyber situational awareness, Routine Activity Theory, and Industry 4.0 maturity. We utilize a Design Thinking methodology to construct a modular MDR architecture that integrates AI-driven threat detection with human-centric analysis.

Results: The study presents a multi-layered MDR framework. The technological layer leverages hybrid cloud architectures and AI for cost-effective log analysis. The operational layer defines a shared-resource analyst model to reduce overhead. The economic layer proposes a tiered service design that aligns with SMB risk appetites and budgetary limits while ensuring provider profitability.

Conclusion: The proposed framework demonstrates that robust cybersecurity for SMBs is achievable through the intelligent integration of automation and shared-service models. By shifting from volume-based to value-based detection strategies, MDR providers can offer sustainable protection against modern threats.