Outsourcing Managed Security Services
As computer attack patterns shift and threats to networks change and grow almost daily, it is critical that organizations achieve reliable information security. Investment decisions about information security are best considered in the context of managing business risk. Risks can be accepted, mitigated, avoided, or transferred. Outsourcing selected managed security services (MSS) by forming a partnership with a Managed Security Service Provider (MSSP) is often a good solution for transferring information security responsibility and operations. Although the organization still owns information security risk and business risk, contracting with an MSSP allows it to share risk management and mitigation approaches.
This report is related to the following area(s) of work:
Security and SurvivabilitySecurity Improvement Module
CMU/SEI-2003-SIM-012
January 2003
Cite This Report
SEI:
Allen, Julia; Gabbard, Derek; & May, Christopher. Outsourcing Managed Security Services (CMU/SEI-2003-SIM-012). Software Engineering Institute, Carnegie Mellon University, 2003. http://www.sei.cmu.edu/library/abstracts/reports/03sim012.cfm
IEEE:
J. Allen, D. Gabbard, and C. May, "Outsourcing Managed Security Services," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Security Improvement Module CMU/SEI-2003-SIM-012, 2003. http://www.sei.cmu.edu/library/abstracts/reports/03sim012.cfm
APA:
Allen, J., Gabbard, D., & May, C. (2003). Outsourcing Managed Security Services (CMU/SEI-2003-SIM-012). Retrieved June 19, 2013, from the Software Engineering Institute, Carnegie Mellon University website: http://www.sei.cmu.edu/library/abstracts/reports/03sim012.cfm
CHI:
Allen, Julia, Derek Gabbard, and Christopher May. Outsourcing Managed Security Services (CMU/SEI-2003-SIM-012). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2003. http://www.sei.cmu.edu/library/abstracts/reports/03sim012.cfm
MLA:
Allen, J., Gabbard, D., & May, C. 2003. Outsourcing Managed Security Services (Technical Report CMU/SEI-2003-SIM-012). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://www.sei.cmu.edu/library/abstracts/reports/03sim012.cfm
Find Us Here
Share This Page
For more information
