Seek A Broad Offering With Tools Around Multiple Security Technologies
There are multiple entry points into a company that cybercriminals can use, meaning that if an MSSP is focused on just email, cloud or endpoint, they’re leaving the customer susceptible to risk, according to Brian Babineau, senior vice president and general manager for Barracuda MSP. If an MSSP just manages firewalls or offers endpoint security, hackers will find and exploit the areas where there isn’t coverage.
MSPs who have been doing RMM (remote monitoring and management) will often try to rebrand themselves as MSSPs by merely adding an endpoint security offering, but this approach misses out on common threat vectors like applications, email or public cloud, Babineau said. MSSPs must be able to adapt to changes in the threat landscape by being able to adjust their offerings over time, he said.
Just like a quality automaker wouldn’t sell a car without a seatbelt, Babineau said a quality MSSP should have a bundle with specific security tools that meet basic protection requirements that they’re only willing to sell as a package. If an MSSP is willing to sell security tools to customers on an a la carte basis, Babineau said it’s probably a decent indicator that they care more the customer’s money than security.