Armata unpacks the benefits of outsourcing security operations

January 2024 Information Security

Caesar Tonkin.

To the backdrop of cyber threats increasing every year, accompanied by a severe skills shortage in the tech industry broadly, and cybersecurity more specifically, many businesses are looking for the best ways to manage their security operations. Cybersecurity specialist business, Armata, led by Caesar Tonkin, recently hosted a webinar to help businesses understand the benefits of organisations outsourcing their security operations.

Tonkin has led a series of industry webinars, seeking to elevate the knowledge-sharing essential for the industry to keep up with nefarious threat actors using ever-more elaborate technology and techniques to attack business systems. The most recent webinar was designed to give businesses deeper insight into the process of outsourcing security operations so that they make more informed decisions.

Tonkin assembled a panel that represents interests that span many countries and industries. Joining him was Chris Woods, Founder and CEO of CyberQ Group, and Bevan Lane, CEO of Infosec Advisory Group.

Armata, which is part of the Vivica group of companies, offers an array of services in the industry, from cybersecurity consulting to managed services to advanced cyber defence services. “This means we are well-placed to help businesses understand the process of outsourcing their security operations. What we can say at the outset is that one must take a systematic approach. Whenever we engage with customers, we work with them to assess, prioritise, examine the benefits they will get, evaluate, and then get into the transition and operation phase.”

Lane said that the need to reduce costs is often one of the key considerations for businesses investigating moving towards an outsourced security arrangement. “We definitely see that the skills shortage, or resourcing squeeze, in the market, is a key factor. For instance, trying to develop a SOC from scratch is costly and complex, as is keeping it running and maintained,” he said during the webinar.

Woods agreed, adding that a SOC needs to be monitored 24/7. “You cannot have an eight or 12-hour shift as that would be futile. Also, you would want to work with a security operations centre (SOC) that services many customers in an array of industries for their width and breadth of understanding and experience. Naturally, we understand that defences are to stop a breach, but if one happens at 2 am, you want to be sure you have the best skills ready in real time to contain and manage the situation,” he added.

The ‘why’ was evident, and the real meat of the webinar lay in the ‘how’ and best practice. Perhaps one of the key takeout’s for businesses attending the webinar was that the decision to outsource is not just a yes or no decision, but rather one that needs to be taken methodically and one that needs to be guided by expertise.

A host of topics were covered, from the main factors that cause businesses to want to outsource as opposed to build their own SOC, to governance and regulation reporting, the issue of false positives in an outsourced model, and much more.

Another key point, reflected by all the panellists, was that an outsourcing arrangement does not have to be an all-or-nothing affair and that often, hybrid approaches work best for many businesses – however, this is a decision that needs to be taken on merit for each unique business.

The key themes that emerged were: Unpacking what is important when building a business case for outsourcing your security operations, the due diligence that should be adhered to when transitioning your security operations, how to achieve expected outcomes from your cybersecurity services partner, and what is required to raise visibility on your cyber defences in an outsourced services arrangement.

Reflecting on the successful webinar, Tonkin said, “It was most definitely a fruitful discussion, and it illustrated exactly why businesses should seek out reputable cybersecurity companies with the right expertise and systems in place to advise them on the best course of action for their own businesses.”

“Whether it is building an accurate business case, deciding to outsource bundles of operations or the entire stack, and drawing up SLAs to give peace of mind while containing costs, there really is no substitute for experience. This is probably where a reputable managed services provider is worth its weight in gold - they bring a broad range of expertise and ongoing experience in cyber defence in an array of industries.”

Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Access & identity expectations for 2024
Technews Publishing IDEMIA ZKTeco Gallagher Salto Systems Africa Regal Distributors SA Reditron Editor's Choice Access Control & Identity Management Information Security AI & Data Analytics
What does 2024 have in store for the access and identity industry? SMART Security Solutions asked several industry players for their brief thoughts on what they expect this year.

Prepare for cyber-physical attacks
Gallagher Information Security Access Control & Identity Management
As the security landscape continues to evolve, organisations must fortify their security solutions to embrace the changing needs of the security and technology industries. Nowhere is this more present than with regard to cybersecurity.

Zero Trust and user fatigue
Access Control & Identity Management Information Security
Paul Meyer, Security Solutions Executive, iOCO OpenText, says implementing Zero Trust and enforcing it can create user fatigue, which only leads to carelessness and a couldn’t care attitude.

Passwordless, unphishable web browsers
Access Control & Identity Management Information Security
Passkey technology is proving to be an easily deployed way to bring unphishable, biometric-based security to browsers; making identification and authentication much more secure and reliable for all parties.

Time is of the essence
Information Security
Ransomware attacks are becoming increasingly common. Yet, many individuals and organisations still lack a clear understanding of how these attacks occur and what can be done to secure their data.

All aspects of data protection
Technews Publishing Editor's Choice Information Security Infrastructure AI & Data Analytics
SMART Security Solutions spoke to Kate Mollett, Senior Director, Commvault Africa, about the company and its evolution from a backup specialist to a full data protection specialist, as well as the latest announcements from the company.

The song remains the same
Sophos Information Security
Sophos report found that telemetry logs were missing in nearly 42% of the attack cases studied. In 82% of these cases, cybercriminals disabled or wiped out the telemetry to hide their tracks.

How hackers exploit our vulnerabilities
Information Security Risk Management & Resilience
Distractions, multi-tasking, and emotional responses increase individuals’ vulnerability to social engineering, manipulation, and various forms of digital attacks; 74% of all data breaches included a human element.

Projections for 2024’s Advanced Threats Landscape
News & Events Information Security
Kaspersky Global Research and Analysis Team (GReAT) experts offer insights and projections for 2024 in the Kaspersky Security Bulletin, with a focus on the evolution of Advanced Persistent Threats (APT).

Veeam and Sophos in strategic partnership
Information Security
Veeam and Sophos unite with a strategic partnership to advance the security of business-critical backups with managed detection and response for cyber resiliency, and to quickly recover impacted data by exchanging critical information.