What Do Customers Want in An MSSP

As the title suggests, half of my InfoSec career has been dedicated to working for Managed Security Service Providers in diverse roles, yet I've observed a common thread among them. They typically offer a standardized process and workflow for detection creation and round-the-clock analyst monitoring. While some MSSPs incorporate response capabilities, others adopt a more opaque approach with proprietary methods for content validation and threat hunting. There always seem to be complaints on us not doing enough.

I have not …

analyst capabilities career clock customers cybersecurity detection infosec managed managed security managed security service managed security service providers monitoring mssp mssps offer process response roles security security service service service providers working