To do this, let’s just step back briefly and look at what it takes to run an IT security operations team. The first thing you need is a security infrastructure. A set of tools and integrated solutions that allow you to monitor, hopefully automatically detect and block bad things. You need to buy the hardware,… Read More
The Right Way to Manage Your MSSP Part 2 (Why Does It Go Wrong)
So the question out there is, why are there so many unhappy outsourcing customer relationships. I’m not saying that’s every single one is a failure, or there is unhappiness. I know of many customers – outsourcing relationships that are very successful. There are good communications and openness between two organizations. But, if you’re in that… Read More
The Right Way to Manage an MSSP (Part 1)
Throughout the years of my work in the IT industry, and having the opportunity to work with many customers who have either decided they wanted to embark upon moving to an MSSPs, or that have started the journey. In many situations, it is not always the happiest of working relationships. The customer feels that the… Read More
The Simple Formula to Get Your IT Team To Take Ownership of Problems
In today’s world, there are many signs that employees, both inside and outside a given security program, are frustrated with its performance. I have frequently been called in to help security organizations reestablish credibility and enthusiasm. There are many reasons why these teams fail. I’m hoping that I can highlight some of the common disconnects… Read More
What is the Right Sized IT Security Budget?
At this time of year the vexing challenge of trying to establish the appropriate IT security budget for next year rears its ugly head. The chief information security officer has to keep enhancing the security services portfolio capabilities and at the same time maintain his budget spending on people and vendors. This is a challenge… Read More