Outsourcing Managed Security Services
• SEI Report
Publisher
Software Engineering Institute
CMU/SEI Report Number
CMU/SEI-2003-SIM-012DOI (Digital Object Identifier)
10.1184/R1/6575933.v1Abstract
As computer attack patterns shift and threats to networks change and grow almost daily, it is critical that organizations achieve reliable information security. Investment decisions about information security are best considered in the context of managing business risk. Risks can be accepted, mitigated, avoided, or transferred. Outsourcing selected managed security services (MSS) by forming a partnership with a Managed Security Service Provider (MSSP) is often a good solution for transferring information security responsibility and operations. Although the organization still owns information security risk and business risk, contracting with an MSSP allows it to share risk management and mitigation approaches.
Cite This SEI Report
Software Engineering Institute (2003, January 15). Outsourcing Managed Security Services. (SEI Report CMU/SEI-2003-SIM-012). Retrieved August 13, 2026, from https://doi.org/10.1184/R1/6575933.v1.
@techreport{Citekey_2003,
author={Software Engineering Institute},
title={Outsourcing Managed Security Services},
month={Jan},
year={2003},
number={{CMU/SEI-2003-SIM-012},
institution={Software Engineering Institute, Carnegie Mellon University},
doi={10.1184/R1/6575933.v1},
url={https://doi.org/10.1184/R1/6575933.v1},
note={Accessed: 2026-Aug-13}
}
Software Engineering Institute. "Outsourcing Managed Security Services." (CMU/SEI-2003-SIM-012). Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, January 15, 2003. https://doi.org/10.1184/R1/6575933.v1.
Software Engineering Institute, "Outsourcing Managed Security Services," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, SEI Report CMU/SEI-2003-SIM-012, 15-Jan-2003 [Online]. Available: https://doi.org/10.1184/R1/6575933.v1. [Accessed: 13-Aug-2026].
Software Engineering Institute. "Outsourcing Managed Security Services." (SEI Report CMU/SEI-2003-SIM-012). Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 15 Jan. 2003. https://doi.org/10.1184/R1/6575933.v1. Accessed 13 Aug. 2026.
Software Engineering Institute. Outsourcing Managed Security Services. CMU/SEI-2003-SIM-012. Software Engineering Institute. 2003. DOI: 10.1184/R1/6575933.v1. https://doi.org/10.1184/R1/6575933.v1