Choosing The Best Security Guards

Deborah Radcliff   Today’s Top Stories   or  Other Security Stories  

SAS Dream Team Video: Strategies for getting senior executives to agree Get a Grip on Storage Growth and Reduce Costs What's Next? Real Answers for Tough Times Wireless LAN Virtualization: Twice the Network at Half the Cost Best Practices for Delivering Virtual Classroom Training Record Capacity for Microsoft® Exchange 2007 With VMware and IBM System x3850 M2 Computerworld Report- Large Enterprises Pay More for IPAM An Apple for Your Enterprise? Six Questions To Ask About Information And Competition Sign up to receive ROI Resource Alerts

August 12, 2002 (Computerworld) -- After the Nimda virus crippled his network for nearly three days in October, Richard Diamond figured there had to be a better way to protect his system. "I wanted to put in a reasonable intrusion- detection system, but I didn't have the resources in-house to integrate our security components and monitor them," says Diamond, CIO at Doctor's Co., a physician-owned medical malpractice insurer in Napa, Calif.

Diamond outsourced his security management to Symantec Corp. in Cupertino, Calif., a vendor of antivirus products that has joined dozens of other product vendors that are expanding their offerings to include managed security services. These vendors review and correlate audit information from different sources, weed out false positives and alert customers to security events and how to respond.

Managed security services providers (MSSP) are addressing a very real need as IT departments are drowning in reams of alerts and false alarms coming from virtual private networks (VPN) and firewall, intrusion-detection, antivirus and other security monitoring systems and logs, says John Pescatore, an analyst at Gartner Inc. in Stamford, Conn. At the same time, it's impossible for most companies to hire and keep an expert staff to sort through all of those reports on a daily basis, says Pamela O'Leary, senior vice president of information services at Rockland Trust Co., a banking service in Rockland, Mass.

There's no denying the value of these services, says O'Leary, who figures she's saving 35% annually by outsourcing security event monitoring to Riptech Inc. in Alexandria, Va. And The Regence Group, an insurance administration company in Portland, Ore., reports saving 80% per year by hiring Counterpane Internet Security Inc., also in Cupertino, to manage its security event monitoring.

But analysts warn that relying on an MMSP is something of a double-edged sword. There's always the chance that the provider doing business today may not be around next year. This is especially true now with managed security services because providers are struggling with the traditional fallout, fragmentation and consolidation that accompanies most new technology or technology services markets. Service providers also differ widely in terms of the devices they monitor and how they correlate and analyze the information they collect. And vendors' profitability boils down to how well they automate event correlation and analysis, which can be very time-consuming and expensive if done manually, says Peter Stapleton, director of product management at Ubizen NV, a monitoring services provider in Reston, Va.

"Trust in vendors is a pretty big issue in this market, given the fact that last April we saw Pilot Network Services and the Salinas Group go out of business rather abruptly," says Allan Carey, an analyst at Framingham, Mass.-based IDC.

Continued...
1 | 2 | NEXT  

Print this Story

Send Us Feedback

E-mail this Story

Digg this Story

Slashdot this Story

Picking a Winner Choosing The Best Security Guards

Symantec and Network Associates reveal security management agendas

"Some Asian airlines are reporting rising losses to inflight credit card fraud because there is typically no online credit-card authorization..." Read more... "In Wednesday's..." Read more... Read more Security posts or See all Blogs

Microsoft dissed Intel's 915 chip set before making 'Vista Capable' changes Microsoft dumps OneCare, slates free security software for '09 Ballmer: Yahoo acquisition won't happen, despite Yang's departure More top stories...

Obama administration to inherit tough cybersecurity challenges BlackBerry Storm sales should be strong, Verizon says Google deal produces 91% of Mozilla's revenue

2008 Salary Survey: IT pay takes tiny leaps If you're like our 7,000 survey respondents, your paycheck this year has been flattened and your bonus obliterated. We offer 12 ways to plump up your paycheck. Windows 7 in-depth review and video: This time Microsoft gets it right Microsoft's next OS might more accurately be called Windows 6.5: It's essentially a better version of Vista. Twitter for business: 5 ways to tap the power of the tweet Twitter can be a valuable business tool -- if you know what you're doing. Here's how to juice it for all it's worth. Microsoft's 'Vista Capable' changes outraged HP, insider e-mails show By helping Intel with loosened 'Vista Capable' requirements, Microsoft 'severely damaged' its credibility, said an HP exec in a newly unsealed Feb. 2006 e-mail. Windows 7 Get the latest news, reviews and more about Microsoft's newest desktop operating system More Continuing Coverage Windows 7 Voting Technology Google's Chrome browser Economy in turmoil: Latest news and tips iPhone 3G Bill Gates moves on Windows Vista A to Z Mac A to Z 2008 Salary Survey Find wage data for 50 IT job titles. More Special Reports 2008 Premier 100 IT Leaders 2007 Premier 100 IT Leaders 2008 Best Places to Work in IT 2007 Best Places to Work in IT 2008 Salary Survey 2007 Salary Survey 2006 Salary Survey 2008 IT Forecast 2007 IT Forecast 40 Years of Computerworld Top 12 Green-IT Users The FAQs About Going Green IT Schools to Watch iPhone: One Year Later Global Mobile Your Next Data Center Management: Reinventing IT Stop Data Leaks Web 2.0 Security Surviving Disasters Managing Storage Virtualization The Lean Storage Machine Storage on Trial Can Web 2.0 Save BI? Bypass These BI Potholes All Zones Business Continuity Zone The File Data Management Zone Security Management Zone The SAS Zone Business Intelligence and Analytics Zone The Enterprise Search Zone Software as a Service Zone The Security Zone See your link here

Deploying Windows Vista to the Desktop: Get It Right with Dell Get this paper now! (Source: Dell) Dell has improved PC deployment activities through patent-pending automation technology and offers an array of services from planning a Windows Vista migration to post-deployment management. Download this white paper  Google's Universal Search for Business Google's Universal Search for Business View this exclusive webcast, free, compliments of Google! Go to the webcast  Managing For Agility Get the full Computerworld report for a limited time, compliments of Computerworld and IBM. Today's corporations need to bend without breaking. Agile IT operations can deliver products and services promptly, and then they can update and improve and reconfigure those resources as need be. But only good management practices will keep it all working together. In this Executive Briefing, we'll look at best practices for providing and managing IT in an on-demand world. Download this executive briefing  White Papers Read up on the latest ideas and technologies from companies that sell hardware, software and services. Deploying Virtualized NetWare on Linux Whitepaper Collaboration Tools and Organizational Success Driving Business Success Through Workgroup Choice and Flexibility View more whitepapers

• Picking a Winner
• Symantec and Network Associates reveal security management agendas
• Choosing The Best Security Guards

• Microsoft dissed Intel's 915 chip set before making 'Vista Capable' changes
• Obama administration to inherit tough cybersecurity challenges
• Microsoft dumps OneCare, slates free security software for '09
• More top stories 

The Enterprise Search Zone With an estimated 40% of the world's information now residing behind a firewall, employee productivity is driven by the ability to quickly find key information no matter where it's stored across your organization. At Google, we believe in a simple premise: all of the information you need to be productive at work should be available through one search box, giving users real-time access to content across the enterprise and delivering a single, integrated, secure set of search results. Learn more in The Enterprise Search Zone See All Zones