August 21, 2015 By Shane Schick 2 min read

Businesses know they need to stick with the things they’re really good at, which may be why security is one of the rising areas of IT outsourcing.

The latest report from market research firm Computer Economics showed that nearly 8 percent of technology budgets in large enterprises are being directed to IT outsourcing firms. While a lot of the work providers are doing involves managing cloud and software-as-a-service (SaaS) products, security was singled out among the competencies where corporations believe working with a third-party vendor will benefit their ability to serve customers.

This may be just good common sense. Obviously, there is more time and talent that can be devoted to supporting products and services when in-house staff aren’t busy trying to identify and fend off the latest cyberattack.

SC Magazine noted that other drivers for IT outsourcing include a desire to be more flexible as an organization, to do new things or to reduce spending in certain areas. Of course, most organizations cannot afford not to invest in security, but the report suggested they are constantly evaluating their options as business and market conditions — which includes security risks — change.

In fact, The Data Center Journal pointed out that 92 percent of companies find the costs of handing over things like disaster recovery are often the same as doing the same work themselves. The objective, however, is to make sure business isn’t disrupted and customers aren’t negatively impacted in the event of a distributed denial-of-service (DDoS) attack, network outage or other security breach. The Computer Economics research suggested that companies are showing more confidence in this area of IT outsourcing because the providers of such services have established a strong track record over the last few years.

Beyond pure IT outsourcing, managed security services are also expected to grow considerably over the next five years. IFSEC Global reported that cloud-based security services in particular would eventually account for a larger share of the overall market than those who provide the same services on a customer’s own premises. Either way, it looks as though the increasing challenge of keeping up with security threats and mitigating the worst risks is leading more organizations to conclude they just can’t do it alone.

More from

How a new wave of deepfake-driven cybercrime targets businesses

5 min read - As deepfake attacks on businesses dominate news headlines, detection experts are gathering valuable insights into how these attacks came into being and the vulnerabilities they exploit.Between 2023 and 2024, frequent phishing and social engineering campaigns led to account hijacking and theft of assets and data, identity theft, and reputational damage to businesses across industries.Call centers of major banks and financial institutions are now overwhelmed by an onslaught of deepfake calls using voice cloning technology in efforts to break into customer…

Grandoreiro banking trojan unleashed: X-Force observing emerging global campaigns

16 min read - Since March 2024, IBM X-Force has been tracking several large-scale phishing campaigns distributing the Grandoreiro banking trojan, which is likely operated as a Malware-as-a-Service (MaaS). Analysis of the malware revealed major updates within the string decryption and domain generating algorithm (DGA), as well as the ability to use Microsoft Outlook clients on infected hosts to spread further phishing emails. The latest malware variant also specifically targets over 1500 global banks, enabling attackers to perform banking fraud in over 60 countries…

New cybersecurity sheets from CISA and NSA: An overview

4 min read - The Cybersecurity and Infrastructure Security Agency (CISA) and National Security Agency (NSA) have recently released new CSI (Cybersecurity Information) sheets aimed at providing information and guidelines to organizations on how to effectively secure their cloud environments.This new release includes a total of five CSI sheets, covering various aspects of cloud security such as threat mitigation, identity and access management, network security and more. Here's our overview of the new CSI sheets, what they address and the key takeaways from each.Implementing…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today