MSSPs Are Great and Other Lies I Tell Myself

Explore a critical analysis of Managed Security Service Providers (MSSPs) in this GrrCON 2019 conference talk. Delve into the complexities of outsourcing security services, examining contractor qualifications, global coverage, legal considerations, and negotiation strategies. Gain insights on evaluating MSSP offerings, understanding service levels, and weighing the pros and cons of outsourcing versus in-house security management. Learn to navigate the challenges of working with MSSPs, including assessing their true capabilities, ensuring comprehensive coverage, and protecting your organization's interests through proper contracting and legal safeguards.

Intro
Most contractors don't have...
ATTENDED NETWORKING EVENT
How much actual experience do they have?
Do they cover all your needs?
Sometimes the work is easy... EASY.
Sometimes the work isn't... WHICH SKILLS?
Efficiency Consultants? WE CAN SAVE YOU MONEY!
Who from your
The other thought...
Ok, someone made the decision...MSSPs.
Is your company global?
What happens if they default? SO ISAYS TO THE CONTRACTOR
And what about references?
Back to your network...
Time to negotiate...endlessly THE NEVERENDING
Make sure legal is involved GET A LAWYER.
In. Writing. FULL. STOP.
Alternatively...
It boils down to one thing
Should you fight it?
Working with them
What did you buy? SEEMS LEGIT
Task/Project
Program
Virtual CISO
NEW TRICKS YOU SAY?
Rip & Replace
What about bringing it back in house?