managed security service provider

MSSPs host, deploy and manage a security infrastructure while simultaneously providing information security (IS) services to one or more clients. They can provide a suite of IS services including virus scanning, spam blocking, hardware and software firewall integration and management and overall security management. To do so, they connect with enterprise IT infrastructures through the Internet or a virtual private network (VPN) and have access to the enterprise's key security and operational IT components, while the client accesses the MSSP platform to analyze and review the overall security architecture state. They perform routine security scans, penetration and vulnerability testing and other security management processes on behalf of the organization using their own security resources, like antivirus, malware detection and firewall software. However, an organization may utilize in-house security resources, outsourcing only its security management and business processes to an MSSP.