Definitions: Managed Security Services

Definition

Managed security services are security operations outsourced  to a company that specializes in those operations. Common managed security  services include firewall management, vulnerability assessments, patch  management, IDS management, e-mail security and content filtering, and  intrusion response/forensics.

Business applications

A managed security services provider does this work for organizations  that choose not to maintain security operations or a portion of security  operations in house due to cost, lack of expertise, desire to concentrate on  core competencies, or the need for 24-hour service. Managed security services  are a popular option for organizations that want to co-source or out-task a  portion of their IT efforts, so that the managed security service provider  serves as an extension of the organization’s IT staff.

Deployment concerns

Choosing to engage  in managed security services does not relieve the organization from  responsibility. A managed security service provider must be carefully chosen with  consideration given to the MSSP’s experience in the organization’s industry,  accessibility (a local presence should be preferred) and investment in current  technology and trained personnel. The MSSP should be considered a partner in  the organization’s security efforts.