Five tips when considering managed security services

In using these tips as a basis for discussions with MSSPs, be sure to understand and clarify service level agreement (SLA) commitments, particularly in the areas of time windows for notification, response, support coverage and items such as failed hardware replacement for premise-based services. It is also important to have a good understanding of the scope of support. Beyond web portal access and telephone, does support extend to items including, for example, auto-notification alerting (e.g. email, text) and the ability to track progress of remediation efforts for identified security events for audit and compliance purposes?

It is also advisable to determine with the MSSP where management responsibilities may begin and end. This touches on SLAs, but becomes more important in shared management models where the business requires some level of access to the technology to, for example, analyse data or update policy rules.

Finally, obtain a good understanding of a MSSP's fee structure. Does the MSSP offer annualised or monthly service subscriptions? Do they charge separately for premise-based equipment? Are there any explicit licensing and maintenance costs?

While not an exhaustive list, these points are intended as a guide to help prepare you for an intelligent, informed discussion regarding your specific security needs with the goal of moving beyond simple cost savings to determining the real value a MSSP can provide.