Next-Generation Managed Security Services

Reports of network attacks and stolen data are commonplace. Consumers routinely undergo the stress of fraudulent charges or compromised credit cards. Computer hacker terms like "botnet" are becoming a part of our everyday vocabulary.

As a result, enterprise security and risk professionals find themselves on a never-ending quest to maintain the integrity of their communication networks, according to the latest study by Forrester Research. Fortunately, managed service providers offer solutions to help relieve the burden.

In its latest initiative to help businesses protect their vital assets from cyber threats and other online attacks, Verizon Business is now offering its next-generation managed security services (MSS) platform, complete with new options.

This enhanced platform is designed to safeguard corporate networks by proactively identifying vulnerabilities and prioritizing threats across the extended enterprise -- resulting in better visibility, enhanced security and reduced risk.

Businesses can now identify the threats that could do the most damage, and then respond quickly. The Verizon Business platform is available immediately to customers throughout the U.S., Europe and Asia-Pacific.

Risk-Based Approach to Network Security
Going beyond first-generation threat and vulnerability strategies to address underlying risk, Verizon’s new platform enables the management of multiple security platforms, changing business requirements and increased security compliance requirements.

It also enables enterprises that lack in-house security expertise and have limited resources to effectively secure their networks while obtaining a consistent quality of service at an affordable, predictable cost.

"The Verizon Business risk-based approach to network security gives enterprise customers a better understanding of the threats to their businesses so they can plan accordingly," said Amy DeCarlo, principal analyst - Managed IT Services at Current Analysis. "This pragmatic approach, coupled with the global availability of this service platform, makes this a compelling managed security offering for the enterprise."

Benefits of Flexible Service Levels
Verizon customers can choose from one of the following three new service tiers to address individual requirements -- including providing effective security solutions across multiple networks in different parts of the world, each with country-specific requirements.

• Basic Monitoring: Allows customers to outsource only the monitoring of security devices to while leveraging in-house staffing and retaining management control.
• Premium Monitoring: Provides continuous monitoring of security devices with analytical support. Security logs and alerts generated by security devices are analyzed and interpreted by security analysts located in one of the company's global security operations centers.
• Premium Monitoring and Management: Incorporates the Premium Monitoring service, and also proactive management of all devices. This includes installing security patches, managing security policies and restoring devices.

Six Options for Managed IP Communications

Many traditional businesses maintain separate networks for data and voice communication. With a converged voice-and-data network, companies can often reduce costs and gain significant productivity benefits.

However, the cost of implementing and managing the solution internally can be prohibitive. A more affordable option is to out-task IP communications to a managed services provider. This arrangement avoids initial CapEx and provides economies of scale -- because the service provider already owns the required infrastructure.

You can choose from several options for managed IP communications services. The following describes typical managed IP communications service offerings, and how you can apply them.

Business IP Telephony Services
This includes both subscriber and group calling services. Companies that need sophisticated PBX features can use a managed IP telephony service. Many small businesses can also receive the functionality that they require with a managed IP telephony solution.

Site-to-Site Voice
This service is really useful for companies with several branch offices that communicate regularly. A site-to-site voice service enables you to call from one site to another using the service provider's voice-over-IP (VoIP) infrastructure, avoiding long-distance toll costs. You can maintain a private dial plan, including support for simple 4-digit dialing.

Public Switched Telephone Network Access
Access to the traditional public switched telephone network (PSTN) can be enabled centrally over the service provider's network. Central PSTN access provides economies of scale, which, in turn, help reduce your costs.

Unified Messaging
These capabilities enable you to retrieve and respond to voice, fax, and e-mail messages from any phone or PC within your organization. Your team can check any type of message from the same inbox -- either the voicemail box, accessed from a phone, or the e-mail inbox, accessed from a computer. Rules-based call routing and speech recognition can further enhance usage for you, and your callers.

Voice over VPN
This service can reduce toll charges for your telecommuters and mobile team members. Using an IP phone from home, or SoftPhone software on your laptop during travel, you can easily make voice calls over the same, secure Virtual Private Network connection that's used to access data network applications.

Other Enhanced Services
You can also increase productivity by delivering new applications and information directly to your team's IP phones. As part of a managed IP telephony service, providers can provide customized Extensible Markup Language (XML) applications -- for example, to access team calendar information or read news stories relevant to your business.

Contact a managed service provider, to learn more about these IP communication capabilities, and the associated cost savings or productivity benefits. Most providers will have customer case studies for your consideration.

IP Virtual Private Network Service Options

Service providers offer a variety of options for managed services. The following describes the first of the top three most popular managed services, and the associated options, to help you determine which services would be most useful for your company.

Businesses gain both tactical and strategic advantages when adopting IP Virtual Private Networks (VPN). In the short term, they benefit from cost-effective, secure network connectivity to branch offices and secure access to remote workers, teleworkers, and global partners.

In the long term, they position themselves to take advantage of new value-added, IP-based applications and to support more users and applications at a lower cost.

Choosing a Best-Fit IP VPN Solution
Cisco commissioned the Yankee Group to describe the decision-making process that enterprises used to select one of three broad types of IP VPN managed services (click on image to enlarge).


You can use the decision tree to determine which of the three options for managed IP VPNs is most appropriate for your company:

• Network-based IP VPNs – Service provider provides complete management services.
• Managed CPE-based IP VPNs – Service provider installs and manages the equipment on the customer premises and provides connectivity.
• Do-it-yourself IP VPNs – Business installs and manages the equipment; service provider provides connectivity.

The Business Case for BT Convergence

The structured approach of Business Technology Management (BTM) is a proven methodology that seeks to unify business and technology decision-making at every level within a company.

Originally conceived to address the needs of large enterprises, there are now very apparent benefits for both small and medium sized businesses. Let's consider the growing body of evidence that supports that business case.

Put simply, BTM is applied to ensure that a company's business strategy can be realized by the technology it deploys. This approach is used by business leaders to align, synchronize and even converge technology and business management for the purpose of ensuring better execution, risk control and profitability.

The Path of Total Convergence
Clearly, these are the type of guiding principles that should transcend all businesses, regardless of their size. Let's explore the meaning of those three states of progression.

Alignment is defined as a state where technology supports, enables, and does not constrain the company's current and evolving business strategies. It means that the IT function is in-tune with the business thinking about competition, emerging threats and opportunities.

Synchronization implies that business technology (BT) not only enables execution of current business strategy, it also anticipates and helps to shape future business models and strategy. In this state, BT leadership, thinking, and investments may be ahead of business needs.

The state of Convergence includes both alignment and synchronization, with technology and business leadership willing and able to operate simultaneously in both spaces. Essentially, the disciplines have merged in both the strategic and tactical senses. A single leadership team working together to orchestrate one intertwined agenda.

A Business Impact Case Study
Does this seem like an academic exercise? Consider the following facts, and then you decide.

According to the BTM Institute, in research covering 50 industries, companies with a more converged business technology management exhibited superior revenue growth and net margins relative to their peer group:

• 12% average annual revenue growth vs. 4% for their industry groups.
• 36% average annual earnings per share growth vs. 7% for their industry groups.
  

Not only did these companies grow at a faster pace than their peers, but they also exhibited consistently greater returns than those of their competitors:

• 6% higher EBITD margins than those delivered by their industry groups.
• 4% average higher return on equity, 8% average higher return on assets and 14% higher return on investments.
  

Therefore, perhaps the most important question is not whether you should strive for BT convergence, but how will you be able to compete with those companies that have already evolved to that state? It's something to think about, as you consider your next steps.

Questions to Ask a Managed Service Provider

The benefits of outsourcing make a simple and strong case, and more organizations are choosing to do so. As a natural result, more and more companies are entering the managed services provider (MSP) market.

According to Matt Cowall at Appia Communications, some of them are well-qualified; others are simply trying to take advantage of a market opportunity. Price is important, but it's not the only consideration, and the benefits of using an MSP can quickly evaporate if you choose the wrong one.

Matt recommends five key questions to ask before selecting an MSP. We'll discuss three of them today.

How long has an MSP been in business?
As in any business, there's an art and science to offering managed services. One obvious way to separate the experienced MSPs from the wannabes is to ask how long they've been in business.

If they've been operational for some time, they probably will have already addressed any service delivery issues they may have experienced in the beginning. Length of time in business is also an indicator of financial stability and client satisfaction.

What kind of support does the MSP offer?
One of the reasons you choose managed services is to turn your headaches over to someone else. If the MSP's support is weak, then you'll need to manage both the MSP and the problems you thought you were outsourcing.

Does the MSP have a support center that is staffed 24/7/365 (as opposed to being on call)? Does it have formal ticketing and escalation procedures? And does it monitor your services for you, or are you expected to bring problems to its attention?

What kind of redundancy does the MSP offer?
As you shop for an MSP, you'll learn about the infrastructure they use. Don't forget to ask if that infrastructure is redundant. Redundancy is the duplication or repetition of critical components in a system to provide alternative functionality in case of a failure. Even the best equipment fails from time to time, so it's essential that there are sound backups in place to ensure service isn't interrupted.

This is part one of a two-part blog post. In part two, Matt will share his thoughts on questions that managed service buyers should ask about provider quality and flexibility.