The reasons to outsource cybersecurity

Issue 2/3 2023 News & Events, Information Security

Kaspersky’s annual IT Security Economics report revealed that the complexity of cybersecurity solutions forced companies to outsource some functions to external infosec providers; they have the relevant expertise and can manage the technologies more efficiently than company employees can.

A complex cybersecurity solution will not guarantee the best protection without a competent specialist managing it. A company’s search for such qualified workers is complicated by the global shortage of experts in this field. This situation forced businesses to outsource certain IT functions to managed service providers (MSP) or managed security service providers (MSSP) in order to get relevant expertise, and up-skill teams.

Kaspersky’s research in South Africa found that 72,7% of SMBs and corporations said that the most common reason to transfer certain IT security responsibilities to MSP/MSSP in 2022 was the efficiency external specialists provided. Among other most frequently mentioned reasons, companies also named compliance requirements (69,7%), the need for specialist knowledge (63,6%), shortage of IT employees (57,6%), and the complexity of business processes (42,4%).

In regards to the cooperation with MSP/MSSP, 69.7% of companies surveyed in South Africa stated that they usually work with two or three providers, while 24.2% deal with more than four IT security service suppliers a year.

“External specialists can either manage all the cybersecurity processes in a company, or just deal with separate tasks. It usually depends on the size of the organisation, its maturity, and management’s desire to be involved in information security tasks. For some small- and medium-sized companies it can be reasonable not to hire a full-time specialist and rather transfer some of their functions to the MSP or MSSP, as it will be more profitable in terms of cost and efficiency.

“For large corporations, outside specialists usually mean extra hands to help their own cybersecurity teams’ deal with a large volume of work. However, it is important to understand that in any case the company should have basic knowledge of information security to be able to assess the outsourcers’ work properly,” comments Konstantin Sapronov, Head of Global Emergency Response Team at Kaspersky.

To gain more insights about IT security costs and budgets in businesses in 2022 visit the interactive IT Security Calculator ( The full report is available to download at (

Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Pentagon appointed as Milestone distributor
Elvey Security Technologies News & Events Surveillance
Milestone Systems appointed Pentagon Distribution (an Elvey Group company within the Hudaco Group of Companies) as a distributor. XProtect’s open architecture means no lock-in and the ability to customise the connected video solution that will accomplish the job.

SMART Estate Security returns to KZN
Nemtek Electric Fencing Products Technews Publishing Axis Communications SA OneSpace Editor's Choice News & Events Integrated Solutions IoT & Automation
The second SMART Estate Security Conference of 2024 was held in May in KwaZulu-Natal at the Mount Edgecombe Estate Conference Centre, which is located on the Estate’s pristine golf course.

From the editor's desk: Just gooi a cable
Technews Publishing News & Events
      Welcome to the 2024 edition of the SMART Estate Security Handbook. We focus on a host of topics, and this year’s issue also has a larger-than-normal Product Showcase section. Perhaps the vendors are ...

Secutel wins OSPA Award for Outstanding New Security Product
Secutel Technologies News & Events Access Control & Identity Management
[Sponsored] Secutel Technologies’ NoKey Access Control solution won the Outstanding New Security Product category at the 2024 OSPAs in South Africa. The awards were presented at Securex 2024 where all category finalists were recognised for their contribution to the security industry.

ONVIF launches new working groups for cloud, metadata and audio
News & Events Surveillance
ONVIF, the global standardisation initiative for IP-based physical security products, is announcing the formation of three new working groups to tackle standardisation work in cloud connectivity, audio, and advanced metadata.

Inaugural Gallagher Security Johannesburg networking roadshow
Gallagher News & Events
Held at Johannesburg’s Foghound Coffee Company in Midrand from 11 to 12 June, security industry professionals gather at the inaugural Gallagher Security Johannesburg Networking Roadshow.

Trend Micro launches first security solutions for consumer AI PCs
Information Security News & Events
Trend Micro unveiled its first consumer security solutions tailored to safeguard against emerging threats in the era of AI PCs. Trend will bring these advanced capabilities to consumers in late 2024.

Dallmeier receives ISO 27001 certification
Dallmeier Electronic Southern Africa Surveillance News & Events
Dallmeier has received ISO 27001 certification for its Information Security Management System (ISMS). The international standard for information security management ensures that companies meet the highest standards of data protection and data security.

AI and ransomware: cutting through the hype
AI & Data Analytics Information Security
It might be the great paradox of 2024: artificial intelligence (AI). Everyone is bored of hearing it, but we cannot stop talking about it. It is not going away, so we had better get used to it.

Local manufacturing is still on the rise
Hissco Editor's Choice News & Events Security Services & Risk Management
HISSCO International, Africa's largest manufacturer of security X-ray products, has recently secured a multi-continental contract to supply over 55 baggage X-ray screening systems in 10 countries.