| Weblog: |
|
Eat less - exercise more!
|
| Subject: |
|
Outsourcing security |
| Date: |
|
2004-08-16 13:35:51 |
| From: |
|
roger69
|
|
|
|
Security for small/medium sized businesses is a real conundrum. My thought is this - if you have your own in-house IT staff, there is absolutely no reason to outsource security. It should be handled in-house as well.
Many small/medium businesses don't have an IT staff, or they have one person who is a part time engineer/part time sysadmin. In these cases outsourcing security might make sense, but:
How is the company going to know that the outsourcing provider is competent, isn't installing backdoors into their systems, etc etc? When you have little or no IT experience in your company, it can be very difficult to tell a real security provider from a fake or bad one.
|
Showing messages 1 through 1 of 1.
-
Outsourcing security
2004-08-17 01:57:05
simon_hibbs
[View]
|
Showing messages 1 through 1 of 1.
|
>very difficult to tell a real security provider from a fake or bad one.
This situation is similar to that faced by companies that outsource their Accounting rather than hire their own accounting staff. The solution is the same too. Note in your contract that you have the right to bring in external auditors to check that everythig is streight.
Yes there's the extra cost of the auditing, but it wouldn't have to be done every year and frankly what other options do small businesses have?
Simon Hibbs