Cybersecurity Leaders Embrace MSS/MDR Solutions, Witness Decrease in Disruptive Cyber Incidents

Optiv Report Reveals the Benefits of Managed Security Services (MSS) and Managed Detection and Response (MDR)

A Promising Solution to Address the Cybersecurity Talent Gap

Optiv, the renowned cyber advisory and solutions leader, has recently published a report highlighting the positive impact of managed security services (MSS) and managed detection and response (MDR) providers in reducing the impact of disruptive cyber incidents. The report is based on a comprehensive survey conducted in collaboration with Information Security Media Group (ISMG), which gathered responses from cybersecurity leaders across various sectors between December 2022 and April 2023.

According to the report, an impressive 73% of organizations reported a reduction in the impact of cyber incidents thanks to their partnership with MSS and MDR providers, which is significantly higher compared to the 14% who saw no impact. This statistic underscores the effectiveness of outsourced solutions in mitigating cyber risks and reflects the growing confidence in leveraging external expertise to address the evolving threat landscape.

Jason Lewkowicz, the executive vice president and chief services officer at Optiv, emphasized the importance of speed, budget, and talent retention in today’s threat landscape. He stressed that organizations that are unable to invest in the right talent and keep up with the rapidly changing technology will be left behind. Managed security solution providers play a crucial role in providing rapid protection, detection, and response, enabling organizations to stay at least one step ahead of cyber threats.

The Challenges of Running Security Operations

The report also delves into the challenges faced by organizations in running their security operations (SecOps) programs. Of the respondents, 64% described the operation as “challenging” or “extremely challenging.” When asked to identify the top three challenges from a list of options, the most frequently ranked challenges were:

1. Hiring/retaining security talent (58%)
2. Increasing sophistication of threat actors (57%)
3. Constantly expanding attack surface (57%)

Another notable challenge highlighted by 33% of respondents was managing the large number of security tools that are not well integrated. Optiv has observed this trend in the market, indicating the need for streamlined and integrated security solutions.

High Satisfaction with MSS/MDR Providers

The report also examined the level of satisfaction with current MSS/MDR providers. Thirty-one percent of respondents rated their provider as a 4 or 5 on a scale of 1 to 5, indicating a relatively high level of satisfaction. Thirteen percent rated their provider as a 1 or 2, while the majority (56%) expressed moderate satisfaction by giving a score of 3.

Addressing Comprehensive Security Needs

The Optiv report reveals that organizations are increasingly turning to MSS/MDR solutions to address their comprehensive security needs. When asked if they would prefer to procure security consulting services from an existing MSS/MDR provider, 31% responded positively, citing the potential benefits of a provider’s familiarity with their environment and the resulting enhanced service outcomes. Additionally, 14% expressed interest in consolidating vendors, a strategy that could lead to increased efficiency and streamlined operations.

Editorial and Advice

The findings of the Optiv report highlight the vital role that managed security services and managed detection and response providers play in strengthening an organization’s cybersecurity posture. With cyber threats becoming more sophisticated and the cybersecurity talent gap widening, businesses must proactively seek outsourced solutions to advance their security maturity without increasing headcount.

While the report highlights the benefits of MSS and MDR services, organizations must also exercise caution when selecting their providers. It is crucial to thoroughly evaluate the expertise, capabilities, and track record of potential partners to ensure they can effectively address an organization’s unique security needs.

Furthermore, organizations should not solely rely on outsourced solutions. They must invest in building internal cybersecurity capabilities and fostering a culture of security awareness throughout the organization. This includes prioritizing the hiring and retention of skilled cybersecurity professionals, implementing comprehensive training programs, and regularly assessing and updating security protocols.

In conclusion, the Optiv report serves as a reminder that in the face of an escalating threat landscape and a shortage of cybersecurity talent, managed security services and managed detection and response solutions offer a promising pathway to bolstering an organization’s cyber defenses. However, organizations must strike a balance between outsourcing and building internal capabilities to ensure comprehensive protection against ever-evolving cyber threats.