AT&T Managed IP Security Services
AT&T continues extending its security system, adding new offers and most recently acquiring VeriSign’s security consulting business. This ongoing investment is helping AT&T raise its global MSS profile and attract new accounts. (1/11/2010)

BT Managed Security Services
BT’s Managed Security provides a complete managed solution with very strong professional service capabilities. More granular services are needed in mobile security integration, unified threat management, DDoS protection and cloud security. (1/11/2010)

IBM Managed Security Services
IBM/ISS delivers a full suite of global managed security services to SME and large enterprise customers. The organization is a particular standout in cloud security, where IBM has a deep set of services to protect dynamic IT environments. (1/11/2010)

Orange Business Services Managed Security Service
Orange provides a wide-ranging MSS portfolio both in terms of depth of coverage and in breadth of global availability, with strong improvements in SIEM and DDoS capabilities. However, all security assessment services are still consulting-led. (1/11/2010)

Symantec Managed Security Services
Symantec is raising its managed security game, expanding into cloud security in a major way with a full complement of consultative and hosted offers and extending its channel with a creative Amazon Web Services alliance. (1/11/2010)

Tata Communications Managed Security Services
Tata Communications has in a very short span of years established itself as a global MSSP with a solid MNC customer base. Lower cost and ‘heavy-lift’ capabilities make this an MSSP for customers who know exactly what they want. (2/22/2010)

T-Systems Managed Security Solutions
T-Systems is expanding its managed security portfolio with in-depth GRC assessments, intrusion prevention, cloud security, identity and authentication capabilities and security-as-a-service (e-mail encryption, anti-malware and authentication). (1/11/2010)

Telefónica Multinational Solutions Managed Security
T-Systems is expanding its managed security portfolio with in-depth GRC assessments, intrusion prevention, cloud security, identity and authentication capabilities and security-as-a-service (e-mail encryption, anti-malware and authentication). (1/11/2010)

Verizon Business Managed Security Services
Verizon Business has emerged as one of the top global MSSPs. However, there is still room for improvement in areas such as managed cloud security. (1/11/2010)

Top

Report Contents

• Current Perspective Rating
• Product Strengths & Weaknesses
• Product Buying Criteria
• Product Metrics

Top

Managed Security Buying Criteria

• Managed Security Advisory and Assessment Services
  • Customers are looking for providers which can offer both security advisory to improve upon a security plan, and network assessment capabilities to identify and patch network vulnerabilities.
    
    
• Managed Firewall and Cloud Security Services
  • Customers rely on these services to carry out the day-to-day administration and enforcement of security policy. Cloud security involves providing security-as-a-service with additional encryption and back-up services.
    
    
• Intrusion Detection and Prevention
  • Customers require an active intrusion defense system to monitor and protect service and take action, when necessary, to prevent a negative outcome.
    
    
• Managed Authentication Services
  • Customers rely on these services to carry out the day-to-day administration and enforcement of security policy and to protect data and facilities from unauthorized users by integrating identity (ID) management across the entire corporate network, possibly incorporating users, machines, applications, and business processes, as well as "physical" identities that can include biometrics, smart cards, and badge readers.

Top

Managed Security Product Metrics

• Managed Security Assessment Services
• Service Availability
  
• Vulnerability Analysis
  
• Site Security Assessment
  
• GRC Review
  
• Security Architecture Review
  
• Secure Web Site Design
  
• Security Audits
  
• Dedicated Security Account Manager
• Intrusion Detection, Prevention and Notification
• Unified Threat Management Service
  
• SIEM, Combining SIM and SEM
• Intrusion Detection System/Intrusion Prevention (IDS/IPS)
• Data Leakage Prevention/Data Loss Prevention
  
• Denial of Service Attack Defense
  
• Vulnerability Scanning Frequency
  
• Incident and Alert Reporting
  
• 24*7 Monitoring and SOCs
  
• SLAs: Time to Escalate; Time to Replace; Time to Change Policy
• Managed Firewall Services
• Firewall Security Policy Development
  
• Router-based Service
  
• Server-based Service
  
• Managed Firewall
• Cloud Security Services
• Cloud Security Consulting
  
• Cloud Encryption
  
• Cloud Data Back-up
  
• Security-as-a-Service
  
• Clean Pipes
• Managed Authentication Services
• Identity Management
  
• Authentication: ID, Token
  
• Validation Authority
  
• Digital Signatures
  
• Managed PKI
• Managed VPN Service
• VPN Platform (IP, Frame, ATM)