Educause Security Discussion mailing list archives

Re: MSSP Services Question


From: Jennifer Minella <jj () VISZENSECURITY COM>
Date: Wed, 25 Aug 2021 21:06:50 +0000

Hi Lawrence,
The MSSP and/or MDR providers usually fall in to a few 'buckets' - which are you interested in?

  1.  MSSP service that will co-manage or fully manage your existing SIEM.
  2.  MSSP service that will co-manage or fully manage other security products such as firewalls, EDR, etc.
  3.  MDR or SOCaaService that will fully manage your environment and give you the option to co-manage but will provide 
the SIEM tools, analytics platforms, 24x7 soc, incident response, etc.

If it's A - is your SIEM/SOAR toolset on-prem or in the cloud?
If it's B - what products do you want monitored and is there central logging already?

_____________________
Jennifer Minella, CISSP
Founder, Principal Advisor- Network Security
Viszen Security
919.539.2726 mobile/text
jj () viszensecurity com<mailto:jj () viszensecurity com>
https://www.viszensecurity.com<https://www.viszensecurity.com/>
[cid:image001.png@01D799D3.9709A5A0]
Get free network security insights delivered to your inbox https://zc.vg/K5Fzk

From: Wilson, Lawrence <lwilson () WPI EDU>
Sent: Wednesday, August 25, 2021 9:53 AM
Subject: MSSP Services Question

Hello,

We are considering MSSP services to complement our WPI security team. Primarily we are interested in MSSP offerings 
that provide the primary SOC function during off-hours (after 5 PM weekdays)  and weekend support. However, we would 
also be interested in MSSP services to back up our on-site team during normal work hours.

I would be interested in hearing from any University that currently uses or is thinking about using MSSP services. Can 
you share the service provider you currently use and/or would recommend I speak with?

Thanks for your help.

Larry Wilson
Chief Information Security Officer

Worcester Polytechnic Institute
100 Institute Road
Worcester, MA 01609
lwilson () wpi edu<mailto:lwilson () wpi edu>
774-823-0422



**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


Current thread: