MSSP guidelines for organisations
Category: Data security
4 December, 2008
Enterprises which choose to, or are considering to, outsource to a managed security services provider (MSSP) may want to heed the advice of one sector resource.
According to SC Magazine, as regulations have tightened and the need for
data compliance is as important as ever, chief information security officers are choosing to outsource to lighten the
data protection burden.
Indeed, the resource urges firms to research the service level agreement terms and guarantees in order to ensure that in the event of an incident - such as a malware attack - the solutions provided are suitable and fit the business imperatives of an organisation.
"Find out not only what controls are in place, but the specifics. Everybody has a policy on mobile media and portable storage devices, but what are the relevant controls, how are they implemented and what metrics are available?," it advises.
Such information may be important to data-heavy companies looking at ways to strengthen their security portfolio.
In related news, it has been recently reported that a computer memory stick containing passwords for the government's Gateway site was found in a pub car park.