Being an MSSP today means that your services are more in-demand than ever before. Opportunities abound, as do risks. As we know this journey includes a lot of uncertainties, we wanted to ease it for you by providing real world, practical tips and advice from other MSSPs. We talked to our MSSP partners, collected valuable tips from them on how to get the most out of your MSSP business, and consolidated them all here. What follows are practical tips, thoughts, and suggestions for your MSSP business, touching on everything from technology to the commercial side of your company. Part of effective communication includes listening to customers; listening to what they want, and asking the right questions to understand what they really need, will allow you to sell more – and have happier customers.
Regularly contributed guest blogs are part of MSSP Alert’s sponsorship program. Read more Cynomi guest blogs here.
1. Stay Up-to-Date with Relevant Technologies
We all know that the cyber threats we face are constantly evolving. From malware automation to phishing kits available on the dark web, attackers are constantly trying to get ahead of our defenses. Just as the threat landscape is constantly changing, so too are the technologies at our disposal. Staying up-to-date with the latest technologies, products, tools, processes, and platforms ensures that you know you’re doing your best to keep your customers safe, while they know they are getting a valuable service from you.2. Build and Maintain Partnerships
Great businesses take a long-term view when it comes to success. Of course, the short-term is important – employees and suppliers need to be paid, and the business has to run – but taking the long view can be the difference between your MSSP being “good” versus being “great.” Key partnerships can be with vendors, other suppliers, customers, third-party service providers, trade show organizers, and even other MSSPs. The strength of your relationships with your clients and vendors is crucial for the success of your MSSP business. Develop strong relationships with your clients by providing excellent customer service, responding quickly to their requests, being proactive, and articulating the value you give them regularly. Work with vendors that support this approach by providing the needed SLA and helping you communicate the value to your customers on an ongoing basis. These strong relationships will help you build trust with your clients and improve your ability to deliver security services that meet their needs.3. Ensure You Know the Current Security Gaps at All Times
This applies to your customers, to the market in general, and even to your own business. You can only effectively offer protection when you know what it is that you’re protecting; where the risks lie, now and in the future. Running a risk assessment at least once a year on each of your clients (though quarterly is better) will highlight security gaps and help focus you on where resources should be allocated. Bear in mind that risk assessments should be updated regularly, as a one-time assessment is not nearly as effective as a series of assessments that show a change over time. While this may seem daunting and resource-intensive, there are modern platforms available that can automate this entire process, dramatically shortening it to just a few hours of work.4. Continually Improve Your Incident Response Plan
In the military, there is a strong emphasis on training and planning. The thinking is that when an incident occurs, everyone will know exactly what to do. The same is true for an incident response plan. Particularly when it comes to serious and time-sensitive incidents such as a ransomware attack, having an up-to-date plan can make all the difference. Experts recommend that an incident response plan should be a “living” document, while at the same time, it should be stress tested often; when an incident occurs, time is of the essence, and your reputation is on the line. What’s more, as noted previously, threats and technologies are constantly evolving. Your incident response plan should also evolve accordingly.5. Focus on Communication
Communication can solve so many real and potential problems. There are different applications of communication, each one is super important for your ongoing success:- Communicate with current clients. This is tremendously reassuring and is often the catalyst to renewed contracts. This type of communication can include updates with regards to current and future capabilities of your practice, new services being offered, new technologies, and can position your business as a thought leader and trusted advisor.
- Communicate with potential clients. You know how great your business is, but relying only on word of mouth for organic growth can slow you down. So make sure to set aside time for marketing, such as newsletters, LinkedIn posts, blogs, and so on. Having testimonials from existing customers will make these communications even more impactful.
- Communicate effectively during incidents. When things aren’t going well – like during a security incident – is exactly when your communication should increase. This assures your customer, prevents panic, and ensures an optimal outcome for all concerned.
- Communicate customers’ security posture: It’s a high-impact, high-value practice to communicate developments and changes to customers’ security posture to them on a periodic basis. This information should be standardized so that periods can be compared easily and any trends noted. And there is a bonus – sometimes it will reveal gaps that need to be addressed – an opportunity for you to sell more products or services.
