Would outsourcing your security make sense from a financial and resource perspective?
Founder/CTO in Hardware, 11 - 50 employees
I would say it depends. Clearly, you have to have an outside agency do audit's if that is needed as part of your business ie. SSA16, BASEL 3, etc. I think for small and mid-size company it does make sense since it is hard to hire and retrain skills in the security and auditing space. The key is to understand what are your requirements, what are the risks and can the provider meet your needs. CIO in Finance (non-banking), 51 - 200 employees
You have to look at which aspect of the security you are describing. For example, a small firm will have a tough time running a security operations center so it makes sense to look for help on that. But there are at least 100 different aspects of cybersecurity under the NIST matrix and a lot of those things are not things that you will want to outsource. VP of Global IT and Cybersecurity in Manufacturing, 501 - 1,000 employees
For small and midsize enterprises I makes sense. As others have indicated, its important to understand your requirements, what/where are the specifics risks can you manage them cost/human effectively with an internal team.
Content you might like
CTO in Software, 201 - 500 employees
Without a doubt - Technical Debt! It's a ball and chain that creates an ever increasing drag on any organization, stifles innovation, and prevents transformation.Less than or equal to 5%33%
Between 6% and 10%56%
Between 11% and 15%6%
Greater than 16%3%
636 PARTICIPANTS
Big Data21%
Remote Work17%
Microservices / Containerization11%
CI / CD5%
Zero-Trust15%
Automation2%
Digital Transformation16%
Cloud / Cloud Native1%
DevOps or DevSecOps6%
Other (comment)1%
1005 PARTICIPANTS
ISSO and Director of the IRU in Healthcare and Biotech, 10,001+ employees
I would definitely suggest this based of how you categorize your types of data/systems and information being stored in certain parts of your data center. I think it’s really dependent on the size of your organization and ...read more
It's what we've done.
Indeed it does, since it is impossible for a single organization to have every type of skill, nurtured talent and sometimes keeping it within would mean ignoring ….its like reducing the risk and if somebody who is ready to take your risk will be vigilant to ensure that there are least security breaches.