Chris Casey, Services Director at PFH discusses the affect ransomware & GDPR has had on the demand for managed services.
Often current affairs and the events of the day can focus the attention of companies keen to ensure they’re not exposed to security risks. In particular, the WannaCry ransomware attack that took place last May has ensured that there is demand for outsourced managed security services.
“This, together with concerns around GDPR (general data protection regulation) compliance, is having an interesting effect on the market,” said Chris Casey, services director for the PFH Technology Group.
“We’re seeing a lot of demand for our managed ransomware service, whereby we actually monitor and measure attacks and the level of services and data coming in to guard against phishing, and that kind of thing.
“Companies are using GDPR as the benchmark of how to get their systems right. The WannaCry event yielded a mind-set change in terms of making companies realise how vulnerable they were in their IT infrastructure. So there’s a lot of work happening right now around the automation of systems and making sure they’re robustly secure.”
According to Casey, this is happening in addition to the run-of-the-mill managed security services, such as those built on anti-virus and web monitoring. As ensuring good IT security becomes more and more complicated, and in many cases becomes a specialised skill in its own right, the appeal of outsourcing it to a managed service provider grows.
However, companies thinking of doing this should be aware that success requires a lot of buy-in on both sides.
“You need both. You can’t just hand over security to protect your systems, because behind every system are your own customers who are vulnerable to attacks through their mobile devices or whatever way they interact with you. Your company culture is important as well as your IT, so it has to be a collaborative effort.”
The best implementations of managed security feature someone in the client company who takes on the role of sponsor for it, effectively making sure the company doesn’t think it can wipe its hands of the matter.
“Security has become a field whereby no one person and no one organisation can really deliver it all themselves. You’re trying to take on the globe when you do that,” said Casey.