By Cheryl Nelan<\/p>\n
Managed Security Service Providers or Managed Service Providers<\/strong><\/p>\n What\u2019s the difference?<\/p>\n Where does one end and the next begin?<\/p>\n Which does your business need?<\/p>\n In our last blog, we talked about New York Managed IT Services<\/a>.\u00a0 Gartner told us that was defined as<\/p>\n \u201cA managed service provider (MSP) delivers services, such as network, application, infrastructure and security, via ongoing and regular support and active administration on customers\u2019 premises, in their MSP\u2019s data center (hosting), or in a third-party data center. MSPs may deliver their own native services in conjunction with other providers\u2019 services (for example, a security MSP providing sys admin on top of a third-party cloud IaaS). Pure-play MSPs focus on one vendor or technology, usually their own core offerings. Many MSPs include services from other types of providers. The term MSP traditionally was applied to infrastructure or device-centric types of services but has expanded to include any continuous, regular management, maintenance and support.\u201d<\/em><\/p>\n Conversely, Gartner<\/a> defines a Managed Security Service Provider (MSSP) as:<\/p>\n \u201cA managed security service provider (MSSP) provides outsourced monitoring and management of security devices and systems. Common services include managed firewall, intrusion detection, virtual private network, vulnerability scanning and anti-viral services. MSSPs use high-availability security operation centers (either from their own facilities or from other data center providers) to provide 24\/7 services designed to reduce the number of operational security personnel an enterprise needs to hire, train and retain to maintain an acceptable security posture.\u201d<\/em><\/p>\n Managed Service Providers\u00a0have traditionally focused on keeping the IT infrastructure<\/a> running smoothly, protecting against threats and providing support for end users.\u00a0 IT Security has always been an element of their services but they are generally more focused on the bigger picture.\u00a0 They include elements to protect the IT infrastructure but they also work to help their clients run productively with the right technology in place.<\/p>\n On the other hand, Managed Security Service Providers dive deeper into security.\u00a0 24×7 monitoring and detection.\u00a0 SEIM\/SOC services, Penetration tests, IT compliance audits, etc.<\/p>\n Most likely both.\u00a0 Unless you have your own IT department, you need an Managed Service Provider to help design your IT infrastructure, implement it, protect it, manage it.\u00a0 You likely need support for your end users and backup services<\/a>.<\/p>\n A Managed Security Service Provider comes in to play depending on the budget and security requirements you might have.\u00a0 A good MSP should be able to advise you on these services.\u00a0 In most cases, MSP\u2019s and MSSP\u2019s work together to provide a complete IT picture for their clients.<\/p>\n Today, there are some overlap of services between MSP\u2019s and MSSP\u2019s.<\/p>\n A strong partner should help guide you across both sides of the IT spectrum. \u00a0CMIT Solutions<\/a>, an MSP for example, has MSSP\u2019s as partners \u2013 this enables us to consult with our clients and guide them to the levels of security services that are a good fit for our clients\u2019 individual businesses.<\/p>\nDefining Managed Service Provider<\/h2>\n
Defining Managed Security Service Provider<\/h2>\n
MSP or MSSP<\/h2>\n
So, which does your small business need?<\/h2>\n
Overlap of Services<\/h2>\n