What are the right questions to ask an MSSP?
Choosing a Managed Security Service Provider (MSSP) is a crucial decision, and knowing the right questions to ask an MSSP is essential. Our guide, “Top 6 Questions to Ask an MSSP Before You Buy,” will help you navigate this process. By understanding these key questions, you can confidently select an MSSP that meets your security needs and aligns with your business goals. Discover the critical considerations to keep in mind and make an informed decision to protect your digital assets.
1) Do you have a dedicated analyst or analyst time?
Dedicated Resources. MSSPs work to tight margins, but you need analysts that have time to get to know YOUR business
2) What is their out of hours support model?
Ask about the price and service difference for 24/7 support or the occasional out-of-hours call out, most MSSPs offer these services. Is the MSSP fully staffed 24/7 or does it rely on OOH call-outs?
3) Does Your MSSP Provider Have a Solid Security Policy?
Data protection. You’ll need to know where their GEO-locations are and how that affects your data. MSSPs tend to have a multitude of client tools or environments to login to, so make sure they are using MFA and password managers with restricted access. And check their JML process.
4) Is there potential for your data to be mixed up with other customers’ data?
Multi-tenancy. Is there potential for other customers to see your data? Ask what measures are in place to protect you from this kind of accidental data exposure.
5) What Is the Analyst to Customer Ratio?
Ideally, there should be no more than 3 customer environments to monitor per Analyst. So, if your MSSP boasts of dozens of customers while they overload their staff, consider the inefficiency and impact on your alerts and service.
6) How Much!?
Don’t be shy to ask about the price! Remember, no-one cares about your business more than your own people, so make sure you’re getting the value you deserve from your MSSP investment!
Forming the right questions to ask an MSSP is vital for ensuring your business’s cybersecurity. By addressing the key points outlined in this guide, you can choose an MSSP that best fits your needs and secures your digital environment. Make an informed decision to safeguard your company’s future.
Feel free to fire these questions at us if you wish. We are ready for them 🙂 If you wish to peruse our cyber defensive and cyber offensive solutions for your business beforehand by all means please do. We look forward to hearing from you.
