This article can also be found in the Premium Editorial Download "Information Security magazine: How to tell if you need the help of security integrators and consultants."
Download it now to read this article plus other related content.
Making it Work
Of course, once you engage a security services firm and the work begins, it's important to keep an eye on things and communicate regularly, MacLean says.
Steady communication will head off potential problems rather than waiting until the end of a project, she added.
Make sure the consultant is sticking to timelines, advises Gregory Thomas, vice president of IT at New Jersey-based Managed Healthcare Associates. "You have to manage them, work with them and have someone who is technical enough to understand what they're doing," he says.
Oftentimes, a consultant or integrator that works over time in partnership with an organization to address security problems can be ideal for both sides.
As for Lockton's Robinson, now that he's found not only an efficient but trusted partner, he knows whom he'll call if he needs help with other security projects. The company is trying to raise security awareness of its employees and has already gotten some feedback from FishNet on that front. "I would reach out to them first," he says.
This was first published in June 2007