Technology is not enough. Outsourcing as the next step in IT security

Cybersecurity outsourcing is more of an exception than a standard in Slovakia. Companies often purchase technology, but the services themselves that would give them real benefits are left aside.

"One of the main advantages is that we can prepare a company for cyber attacks faster. Instead of months of building an internal team, it can be a matter of weeks," says Michal Srnec, a cybersecurity expert at Aliter Technologies.

Building your own team is time-consuming and financially demanding - companies usually look for a quality person for six months. However, an attacker will not wait until then.

However, outsourcing is not without risks. “If the partner is not reliable, it can be the weak point – data will leak, promises will not be fulfilled, or the incident will not be handled. Choosing a partner is therefore a key moment,” emphasizes M. Srnec.

He recommends that companies start with themselves: “First, define what you actually expect from the service – whether it is incident response, service management, or just a specific part. And only then look for a supplier.”

Then, it is important to check the company’s track record, the qualifications of experts, certifications, and the ability to deliver the service. The contractual setting is also key – outsourcing is a business relationship that must have clear rules and responsibilities.

According to M. Srnec, the difference between Slovakia and abroad is significant: “In Western Europe or the USA, outsourcing is a completely common thing. Companies want to focus on their core business and leave security to experts. In our country, the attitude is still at the forefront: it is better to own than to rent.”

However, legislation also brings changes. The amendment to the Cybersecurity Act places greater emphasis on systematic risk management and cooperation with third parties.

The expert explains that outsourcing can also be used effectively by smaller companies: "It is often difficult for small companies to build their own team. Outsourcing makes the most sense for them - just as they can outsource accounting, they can also outsource cybersecurity."

Learn more in the video interview.

ZDROJ: TREND