| According to latest data, more than 80% of CIOs and | | | | organizations use multiple vendors for the security |
| IT professionals have admitted that the current | | | | services. |
| downturn has induced cost-cutting and tightened the | | | | Another point of discussion for these organizations is |
| expenditure on security measures. Therefore, many | | | | the MSSPs themselves, due to trust and privacy |
| firms are adopting the practice of offloading their | | | | concerns. However, the good way to solve the |
| anti-virus, anti-spyware, anti-phishing and web filtering to | | | | problem is by third party certification, which can rate |
| Managed Security Service Providers (MSSP). | | | | the quality and services of a particular MSSP. |
| Managed security services (MSS) | | | | Various MSSPs |
| Managed services are the practice of transferring daily | | | | Symantec: The company is one of the last |
| responsibilities as a strategic method for improved | | | | independent security-software vendors that provide |
| effective and efficient operations and MSS is the | | | | MSSP business. Its main rivals ISS and Cybertrust had |
| systematic approach for supervising an organization's | | | | been acquired by IBM and Verizon, respectively. |
| security requirements. | | | | Symantec had started its MSSP business back in |
| A MSSP can offer different types of security tools to | | | | 2002, when it acquired Riptech for $145 million. The |
| firms, which are probably difficult for individual | | | | company offers various services, which are CPE |
| organizations to purchase and implement on their own. | | | | (Customer Premises Equipment) – based or |
| The security tools may be conducted in house or | | | | in-the-cloud messaging services. Also, the company |
| outsourced to a service provider that supervises other | | | | provides security-related professional services. |
| companies' network and information system security. | | | | IBM Corp. : Besides BT, IBM Corp, one of the world's |
| The MSSP works round the clock and offers any of | | | | largest IT giant had also started its own managed |
| the following services: | | | | security-services business after the acquisition of |
| • It regularly assesses vulnerabilities in the | | | | security technology vendor Internet Security Systems |
| client’s system. | | | | (ISS) for $1.3 billion in 2006. Now, the Big Blue offers |
| • It manages client's network firewall, which | | | | various managed security services that are available in |
| comprises surveillance of all the firewall's traffic and | | | | combination with customer premises equipment or in |
| evolving regular reports | | | | the cloud. |
| • It detects all the efforts of intrusion, both at | | | | Recently, the technology giant has signed a five year |
| network or individual levels | | | | deal with Qwest for IBM managed services. The |
| • It will also provide mitigation support for any | | | | services of IBM’s Internet Security System are |
| intrusion that has occurred, which include emergency | | | | designed to keep small and medium-sized businesses |
| response and forensic analysis | | | | protected from viruses, spam and DDoS attacks. |
| • They also provide content filtering services, | | | | Verizon: In 2007, the company had acquired |
| for email filtering and data archival | | | | Cybertrust, a privately held provider of global |
| Few concerns with MSSPs | | | | information security services. Now, the company |
| Today, various organizations are opting for such | | | | offers services in combination with CPE-based or in |
| services to save money, space and better ROI. But, | | | | the cloud. Further, its professional services include |
| there are also concerns that what will happen when | | | | managed network access control. |
| security provider’s network fails. Therefore, many | | | | |