Would large companies be comfortable with co-sourcing or outsourcing security functions such as PKI?
Over the past year, many corporations have come to the conclusion that working with a managed security service provider for monitoring their online security is in fact no different to what they have been doing for years to handle their physical security or, in the case of banking, their transfers of funds. By outsourcing the management and monitoring of firewalls and intrusion detection systems, for example, companies free valuable IT resources that can be used to support overall security objectives, such as policy compliance. Is it no longer sufficient for firms just to deploy individual security products such as antivirus applications? With hackers and viruses becoming more sophisticated, security has stopped being a series of protective product installations and has instead become a full-time process. It is simply not enough to deploy point products, or even families of products, and assume that the organisation is safe. How could a third-party outsourcer help firms to achieve bette