August 2019ENTERPRISE SECURITY| | 19Manage Security Services (MSS) are sometimes being wrongfully reduced to the role of one company IT security outsourced to an external provider. Actually, it has always been far more multifaceted than this simple vision, and it is essential that managed security providers (MSSPs) collaborate more with their clients as the digital transformation of business is bringing significant changes ahead. As a matter of fact, the "one size fits almost all" era is progressively fading away due to the growing complexity of architectures to protect and cyberattacks on the rise. Petya incurred $300 million to Maersk in 2017, WannaCry almost £92 Million to the NHS and recently a US healthcare billing company American Medical Collection Agency (AMCA) filed for bankruptcy due to a data breach affecting more than 7 million users last year. Initially, MSS focused on centralized network infrastructures with servers, desktops, and traditional devices. However, the cloudification of operations and support has brought a vertical dimension into the picture. This implies for MSSPs to cover a new and wider scope with additional security vulnerabilities to deal with; if it means more business opportunities, it also requires strong internal investments for a ready and fit- for- purpose product portfolio.The cloudification is also bringing more confusion on defined roles and respective responsibilities between cloud providers, MSSPs and costumers, with potentially a significant legal and financial impact for those who are not reading each Terms and Conditions of engagement contract carefully. It can be simple actions, such as ensuring regular data storage and back-ups frequently (hourly/daily/monthly) for information security; this task is generally to be done by the end-user, but these quite often wrongly assume cloud providers or MSS will perform it. As the networks get bigger and interconnected, understanding who is in charge and expected duties are becoming cumbersome. Clear definitions and tasks are essential. The technology is also evolving faster than enterprise culture and assumptions can become easily incorrect, similarly with simple employee mistakes.The cloud and its inherent security concerns are not only bringing new competitors into the market place with specific product lines intended Manage Security Services facing a multidimensional change aheadBy Alix Leboulanger, Senior Analyst- Aerospace & Defense, Frost & Sullivan Alix LeboulangerCXO INSIGHTS
< Page 9 | Page 11 >