The Information Security Manager’s Dilemma
Build your own information security department or transfer the functions to an MSSP provider? It depends on the scale, budget, data criticality, and maturity of the processes.
Full-time team
Advantages: full control, deep understanding of the context, dedicated resource.
Cons: high cost (photos, licenses, training), personnel shortage in the Republic of Kazakhstan, limited expertise, inability to provide 24/7 mode without 5-6 analysts.
MSSP provider
Positive: cost savings (cost sharing between clients), instant access to expertise, scalability, 24/7/365 round-the-clock SOC, up-to-date threat knowledge.
Cons: less control, dependence on the provider.
Comparison
Start-up: regular — from 6 months; MSSP — from 2-4 weeks.
Response time: regular — depends on schedule; MSSP — SLA is less than 15 minutes.
Coverage: full—time – limited; MSSP — from monitoring to pentest.
The optimal model is a hybrid one: key functions inside, operational monitoring and response — MSSP.
How to choose an MSSP
Please note: own SOC in the Republic of Kazakhstan, certifications, experience with the public sector, transparency of SLA, customization of services.
