{"id":17858,"date":"2022-11-17T13:36:15","date_gmt":"2022-11-17T12:36:15","guid":{"rendered":"https:\/\/www.m-q.ch\/?p=17174"},"modified":"2024-11-20T10:16:15","modified_gmt":"2024-11-20T09:16:15","slug":"pflichtenheft-fuer-it-sicherheitsdienstleister","status":"publish","type":"post","link":"https:\/\/www.organisator.ch\/en\/operational-excellence\/2022-11-17\/pflichtenheft-fuer-it-sicherheitsdienstleister\/","title":{"rendered":"Specifications for IT security service providers"},"content":{"rendered":"
\"MDR\r\n
Based on study results, a quasi specification for IT security service providers was derived. (Symbol image; Unsplash.com)<\/figcaption>\r\n<\/figure>\r\n

What IT security managers expect from managed detection and response is shown by the results of interviews with responsible persons in the USA and Canada conducted by Bitdefender and the Enterprise Strategy Group in August 2022. J\u00f6rg von der Heydt, Regional Director DACH at Bitdefender comments on the study from a German perspective: \"A very similar picture emerges from the interviews with German customers. The spectrum of requirements for MDR service providers is similarly broad, as is the motivation for considering an MDR service. What they all have in common, however, is the fact that skilled employees - i.e., IT security analysts and specialists - are becoming increasingly difficult to obtain and retain, while the number and complexity of attacks are continuously increasing. At the same time, the dependence on digital, i.e. IT-supported processes, is increasing. A dilemma that can probably only be solved by the increased use of managed security services.\" The following sections summarize the findings.<\/p>\r\n

1. many IT teams start out planned in managed detection and response<\/h3>\r\n

MDR is not an emergency measure in many cases. Most of the respondents-57 percent-said that upcoming security audits prompted them to work with MDR vendors. Forty-seven % wanted to review and manage vulnerabilities. Only 39 % each acted specifically to defend against or mitigate an event, detect security-related incidents, or recover IT systems and digital processes after an attack. Thirty-seven %s were concerned with defending against a network intrusion or responding more extensively to a security event. About one in three (33 %) hoped for help in pre-sorting and prioritizing daily alerts.<\/p>\r\n

\"\"\r\n
Figure 1: Reasons for using an MDR service. (Source: Bitdefender\/ESG.)<\/figcaption>\r\n<\/figure>\r\n

When asked about their motivation, it is clear how urgently the security executives surveyed need help to address both the scaling of IT security and the increasing attack surface and complexity of attacks. 41 % of study participants assumed that external security professionals could do a better job of cyber defense than their in-house teams. This is a remarkable finding, given that, after all, many companies participated that, given their size, should have their own qualified security team. Equally high was the proportion of respondents seeking a more scalable operational model for their IT security. 37 % implicitly admitted that they did not have the security tools and systems they needed to execute their cyber defense processes. However, the following motivations are also interesting:<\/p>\r\n