Consider Outsourcing Your Network Security

Wednesday, January 27, 2010

Ken Leeser


By Kenneth Leeser, President, Kaliber Data Security and Compliance

As more and more critical applications and services move to the cloud, organizations are increasingly receptive to the idea of using a managed security service to protect their network and information assets.

The number and types of external threats to a network are growing exponentially, and unless a company has a dedicated and highly specialized team devoted to network security, it’s hard to keep up with the rapidly changing threat landscape.

After all, the threats of the Internet are the same for every company regardless of its size.

There are many benefits for small or midsize companies or even branch offices of large companies that use a managed security service.

First of all, it’s a great way to get the security expertise that would be too expensive to hire and retain in-house. The same goes for technology.

A small company might not be able to afford to buy the best technology, but it can rent the use of the technology from a service provider.

Moreover, the company can get a broader range of solutions that otherwise might not be in the budget — solutions such as intrusion detection and prevention (IDP/IDS), antivirus and antispam, content filtering, encrypted email and secure VPNs.

The decision criteria for engaging the services of an MSSP (Managed Security Service Provider) are much the same as those for any other form of outsourcing: cost-effectiveness compared to in-house solutions, focus upon core competencies, need for round-the-clock service, and ease of remaining up-to-date.

By engaging an MSSP to manage the information security infrastructure, companies benefit from a common incident management platform that integrates and understands each organization’s specific security policy.

The result is a single point of accountability and an improved security posture. But it is also important to note that a company that chooses to engage an MSSP still retains the ultimate responsibility for its own security, and as such must be prepared to manage and monitor the MSSP, and hold it accountable for the services for which it is contracted.

Finally, the ever-changing regulatory requirements associated with Massachusetts 201 CMR 17.00, HIPAA, Sarbanes Oxley, and various state data breach notification laws, has significantly complicated many organizations’ ability to effectively manage their risk.

An MSSP can step in and help manage risk and help companies achieve compliance in a cost effective manner.

Kaliber Data Security and its partner Perimeter eSecurity work together to assist small and medium sized businesses meet their specific regulatory or risk reduction needs within a superior, cost-effective Managed Security Services environment.

These services are designed to help ensure that regulatory processes are followed while risks are managed and controlled appropriately.

Possibly Related Articles:
Budgets Enterprise Security
Security Strategies Outsourcing Regulation
Post Rating I Like this!
Anthony M. Freed Managed security is definitely a good measure for SMB's to control costs in this turbulent economy...

Thanks Ken!
The views expressed in this post are the opinions of the Infosec Island member that posted this content. Infosec Island is not responsible for the content or messaging of this post.

Unauthorized reproduction of this article (in part or in whole) is prohibited without the express written permission of Infosec Island and the Infosec Island member that posted this content--this includes using our RSS feed for any purpose other than personal use.