Sidebar: 10 Questions to Ask a Managed Security Service Provider

Computerworld - Before signing on the dotted line, experts suggest asking MSSPs these questions:
1. How do you take raw data from the network and correlate events to determine whether an attack is under way? Do you use off-the-shelf tools or your own technology?
2. May I see the resumes of the staffers who will be working on my account?
3. What staff screening and hiring practices do you use?
4. Do you have references from companies that are the same size as my company, in the same industry or in the same area?
5. How will you charge for services out of scope?
6. How will communications between organizations be managed?
7. What processes will be used to control access to devices and logs?
8. What auditing is in place for access/change control and reporting?
9. Do you provide phone or in-person support for security incident remedies?
10. What are your disaster recovery safeguards?

Read more about Networking in Computerworld's Networking Topic Center.