Key Roles in the World of IT Security IT Security involves companies serving in a variety of roles that represent different portions of the value proposition. The general categories listed below are not necessarily mutually exclusive Different companies may have different models or may merge different models. Here are the general categories: Product Vendors These are the companies that develop the software, products and solutions intended to protect your data and other assets. You will likely find some options to be more effective than others, and some will work together in the same environment better than others. When they don’t interoperate very well, they might cancel out one another’s benefits, or cause the systems to work more slowly, due to the different products struggling for dominance. Vendors often rely upon MSPs and MSSPs to bring their products to market, though some may also sell through their internal sales forces. From the customer standpoint, direct sales efforts are led by people with sales quotas. Thus, the product they’re offering may or may not be the best fit for your circumstances. Managed Service Providers (MSPs) MSPs use vendor products mentioned above, sometimes with a portfolio of vendors to choose from, to deliver a security solution. They are not the developers of the product, although sometimes they may combine different products into a unified offer; perhaps combined with an additional home- grown service that differentiates them against their competition. MSPs can often optimize a given solution to your needs and be able to function in a mode very similar to consultants (see below). In most cases, the buyer will have certain options available in their service selection but will be unable to make detailed requirements on which vendors and solutions will be used. This limitation is typically balanced by enhanced simplicity. Managed security services can also be provided by carriers working in an MSP or MSSP model. In most cases, carrier-based offerings are made available in conjunction with other offered services. Managed Security Service Providers (MSSPs) These are managed service providers who specialize in IT security to a much higher degree than most MSPs. They also have invested substantial sums of money in security operation centers. Consultant/Agent/Reseller/Trusted Advisor This segment of the industry typically does not have an internally developed product or technology. They instead are designed to function as independent entities that can help you sort through the available options based on the specifics needs, budgets, and legacy infrastructure of your company. Their role is to do the necessary legwork, understanding the differentiators among the various offer- ings as well as those of the vendors that provide them. Aside from helping with the pre-sales phase of the engagement, they can also play a key role in deployment, optimization, support, training, and other facets of technology. Copyright © 2020 AVANT Communications, Inc. 2514 Copyright © 2020 AVANT Communications, Inc. 334 Copyright © 2020 ACopyright © 2020 AVVANT CommunicANT Communicaations, Inc.tions, Inc. 7 Copyright © 2020 AVANT Communications, Inc.