As computer attack patterns shift and threats to networks change and grow almost daily, it is critical that organizations achieve reliable information security. Investment decisions about information security are best considered in the context of managing business risk. Risks can be accepted, mitigated, avoided, or transferred. Outsourcing selected managed security services (MSS) by forming a partnership with a Managed Security Service Provider (MSSP) is often a good solution for transferring information security responsibility and operations.
Although the organization still owns information security risk and business risk, contracting with an MSSP allows it to share risk management and mitigation approaches. More and more organizations are turning to MSSPs for a range of security services to reduce costs and to access skilled staff whose full-time job is security. Such services may include
network boundary protection, including managed services for firewalls, intrusion detection systems (IDSs), and virtual private networks (VPNs)
ecurity monitoring (may be included in network boundary protection)
incident management, including emergency response and forensic analysis. (This service may be in addition to security monitoring.)
News: Security Sources
