Reference no: EM133637822

Case

The case studies are designed to challenge to think strategically at the CIO/CISO level.  In your discussion of each question, focus on how you would deal with each of these situations if you were the CIO/CISO thus integrated both your business acumen and your technical knowledge.  Students should feel confident exploring any  industry trends and should be less concerned about getting "the right" answer.  These cases allow you to think about reacting to situations before you are actually put in that situation.

Hypothetical:

As CIO/CISO, you've built your blue team and established the RACI (essentially who is doing what).  The CEO has put additional cost pressure on your organization that will not allow you to establish 24x7 support with your employees (it would be too expensive).  You do have enough money to partner with a MSSP firm (Managed Security Service Provider) or Managed Detection and Response (MDR) firm.

1. Research whether MSSP or MDR makes more sense for your organization (and why).
2. Determine which provider you are interested in partnering with based on independent ratings (e.g. Gartner Magic Quadrant).
3. Determine what services of your blue team (e.g. IPS monitoring, firewall monitoring, etc.) that you partner with the MSSP or MDR provider on.
4. Discuss what the support model will look like (e.g. will you use it for first shift staff augmentation, after hours support, etc.).
5. Discuss anything else that is of interest.