While outsourcing even part of an IT security operation still draws qualms, organizations are being forced to recognize that the level of in-house security expertise needed to run a full-time business is too difficult and costly to acquire and maintain. As a result, many are placing more trust in MSSPs (managed security service providers). "There certainly was a lot of hesi-tancy. I wasn't too comfortable about the whole idea of outsourcing [ security]," said Daniel Kesl, information security officer for Denver-based Newmont Mining. "But as we went further with the processes and controls in place, it's not as terrifying as I once viewed it."
A few months ago Newmont Mining signed on with Waltham, Mass.-based Guardent, an MSSP, to help the gold-producing company manage firewalls across different time zones and provide IDS (intrusion detection system) services at its seven global sites. Newmont locations outside the United States include South America, Indonesia, and Asia.