Service
MSSP Blueprint
More and more organisations need mature security services, but not every one of them can afford to build them alone. We help local governments, corporate groups and consortia design and build their own shared MSSP: a centre providing security services to their units or members. We deliver a ready architecture, implementation plans, staffing plans and processes on which such a service can be built. In other words, we provide the design and the knowledge needed to build a capability that the organisation then delivers itself.
IMPORTANT UP FRONT
Who we are in this project, and who we are not
We state this clearly from the outset, because it is easy to misunderstand. We design and help build MSSPs, but we are not ourselves an MSSP and we do not provide managed services. IS Consulting is the architect of this solution, not its operator. We deliver the design, methodology and implementation support, while the actual delivery of services, their day to day operation, monitoring and response, remain with the organisation building its own MSSP. We do not run a SOC, we do not monitor systems continuously and we do not handle incidents. We build the capability, which the client then runs itself or with a provider of its own choosing.
Who this is for
This is a solution for organisations that want to provide security services within their own structure or community, rather than building them separately, each on its own.
Local governments
That want to secure their subordinate units, for example schools, healthcare facilities or municipal companies, within one coherent model.
Corporate groups
That want to provide security centrally to their companies, instead of letting each one manage on its own.
Consortia and communities
That want to join forces and build one shared MSSP, splitting the costs and competencies that a single organisation often lacks.
In all these cases the idea is the same. Instead of duplicating effort and expense in many places, one shared capability is built, tailored to the realities and scale of the given group.
What we deliver, what the blueprint consists of
Our blueprint is not an idea but a concrete set of materials on which the service can be built.
Service architecture
The design of how the MSSP is to be built, what functions it covers, how they are organised and how they work together. This is the skeleton of the whole solution.
Implementation plans
A description of the path from decision to a working service, with stages, sequencing of activities and key decisions along the way.
Staffing plans
An indication of which roles and competencies are needed for such a service to operate, and how to organise the team that will run it.
Operational processes
Ready processes describing how the service is to function day to day, so that the organisation knows not only what to build but also how to run it afterwards.
These materials provide a solid starting point, tailored to the specific organisation, its scale and needs. Thanks to them, building a shared MSSP begins with a well thought through design, not a blank page.
Cooperation models
We tailor the extent of our involvement to how much support the organisation needs. Regardless of the model, delivery and running of the service remain with the client.
Model 1
Starter
We hand over the architecture and blueprint materials, and the organisation carries out the build itself, with its own resources. Good for organisations with their own team capable of leading the implementation and that primarily need a good design.
Model 2
Guided
We hand over the blueprint and additionally oversee the implementation, making sure it is built in line with the design and advising at key stages. Delivery still belongs to the organisation, we make sure it stays on the right track.
How we work
We start by understanding who is to provide services to whom, what the scale is, and what the realities of the organisation or community are. On this basis we tailor the architecture and plans to the specific case, then, depending on the model chosen, we hand over the design for independent delivery or oversee its implementation. The goal is always the same: a ready capability on the organisation's side to deliver security services itself, not a service delivered by us.
Related services
Building a shared MSSP pairs well with assessing the starting point and with verifying compliance.