How to improve security by contracting security outsourcing

There is an increasing number of articles and internet forums against outsourcing security and contracting Managed Security Services. In this type of articles and forums, outsourcing providers professionals are presented as a security threat to their customers.(An extreme example of this can be seen at Cio.com Forum (6)). The aim of this paper is to show customers the possible advantages of contracting outsourcing, not only in traditional areas but also in security, from the point of view of a worker at a outsourcing services provider. Security workers at outsourcers are IT security professionals and the only difference with other security colleagues is that “our” machines are providing services to our customers’ enterprises instead (really besides) to our own enterprise. From model indicated at SANS Security Essentials (1), we will see how Operations Security Program, Defence in-depth and Security Policies can be improved due to a collaborative relationship between customer and outsourcer. All depends on how customer faces outsourcing, signed contract and rely on outsourcer.