The Insider's Guide to Next-Generation BPM
By Ruvi Kitov, CEO, Tufin Technologies , 06/02/2009
Print this article
Email this article
Talk Back!
Write to Editor
Ask 10 IT professionals if outsourcing security operations to a Managed Security Services Provider (MSSP) is a good idea and you're likely to get 10 different answers ranging from "absolutely yes!" to "are you crazy?" What to outsource and why is a function of a large set of variables ranging from the nature, size and location of your business to the size, makeup and skill set of your IT team, current and planned IT initiatives, who and where your business partners are, what your security budget is…and the list goes on.
At the end of the day, companies outsource their security because the benefits of doing so outweigh the risks. And there are benefits -- enough to fuel what Forrester estimated to be a $3 billion industry in 2008. The three main reasons companies outsource some or all of their security operations are reduced costs, 24/7 monitoring of critical systems (that would not otherwise be possible), and access to resources or expertise not found in-house.
With today's bleak economic state forcing massive cost reductions, evaluating an MSSP is likely to end up on even the most reluctant CISOs to do list. With that being the case, the question is no longer "Should I trust an MSSP?" but "What should I trust an MSSP with?" And even more important, "How will it work?"
While there has been quite a bit of innovation in the MSSP space with offerings that include limited device monitoring to comprehensive network design and management, outsourcing doesn't, and shouldn't mean giving up control. An airtight SLA might give you an external throat to choke and legal protection if something goes wrong, but if something does go wrong -- if data is lost or systems are compromised -- the damage is still done. Even if it's the MSSP's fault, it still reflects poorly on the organization -- not to mention the person who chose the MSSP.
Managed firewall services are one of the most popular (and pervasive) MSSP
offerings. According to Gartner, Inc. in its 2007 MSSP Magic Quadrant, 60 percent
of Fortune 500 enterprises had engaged in some level of use of an MSSP, representing
about 20 percent of enterprise firewalls under remote monitoring or management.
A Nov. 2008 Information Week poll revealed 68 percent of respondents working
with an MSSP them were using them for managed firewall services.
-1-
Smart Case Management: Why It's So Smart.
Data Virtualization: Putting Your Data to Work for Your Cloud, BPM, MDM, and SOA Projects
Live Discussion: Smart SOA Governance-A Look at Successful Case Studies
The Right Way to Do Data Integration for Composite Applications
March 10, 2011
The sixth annual BPM in Action 2011 Virtual Conference will explore cutting-edge market developments in BPM and describe how to leverage them for improved business operation and performance. More
Date:Nov 05, 2009
Time:12:00 PM
ET- (17:00 GMT)
Date:Oct 29, 2009
Time:13:30 PM
ET- (17:30 GMT)
In part two of Joe McKendrick's recent podcast with Miko Matsumura, chief strategist for Software AG, they talk about how SOA and IT systems need to change and grow and adapt with the organization around it.
Listen Now
Phil Wainewright interviews David Vap, VP of products at RightNow Technologies, and finds out how sharing best practices can help businesses understand how best to engage with online communities.
Listen Now
Scott Hebner, Vice President of Marketing and Strategy for IBM Rational, discusses a topic on the top of every company's mind today: getting the most from IT investments.
Listen Now
In BI, this tough economy and the increasing role of Web 2.0 and MDM are certainly topics on people's minds today. WiseAnalytics' Lyndsay Wise addresses each of them in this informative podcast.
Listen Now
Deepak Singh, President and CTO of Adeptia, joins ebizQ's Dennis Byron in a podcast that gets its hand around the trend of industry-specific BPM.
Listen NowSmart event processing can help your company run smarter and faster. This comprehensive guide helps you research the basics of complex event processing (CEP) and learn how to get started on the right foot with your CEP project using EDA, RFID, SOA, SCADA and other relevant technologies. Learn More
A lot of people are talking about Enterprise 2.0 as being the business application of Web 2.0 technology. However, there's still some debate on exactly what this technology entails, how it applies to today's business models, and which components bring true value. Some use the term Enterprise 2.0 exclusively to describe the use of social networking technologies in the enterprise, while others use it to describe a web economy platform, or the technological framework behind such a platform. Still others say that Enterprise 2.0 is all of these things. Learn More
|
|
This new publication from our sister site SearchSOA.com explores workflow, business activity monitoring (BAM) and complex event processing (CEP) issues. |
|
|
