Benchmark research
This article was written based on the survey: 'What decisions do organisations make on digitisation?' Conducted by BenchLab. This research was conducted between April 2022 and January 2024 among business service providers, municipalities, and healthcare institutions. Meanwhile, over 200 decision-makers participated in the survey. Over 800 decision-makers have been added to Conscia's network and provided with regular survey updates. All benchmark reports were followed up by appointment by Conscia specialists.
Whereas for years cybersecurity was all about prevention, more and more organisations now recognise that sometimes it is necessary to prevent as well as cure. By preparing for the time when you are attacked, you can respond more adequately in such cases. Managed detection & response (MDR) services can help. This is often thought to be complex and costly and therefore only for large organisations. Is this true?
A cost-effective solution for cybersecurity
Whereas for years cybersecurity was all about prevention, more and more organisations now recognise that sometimes it is necessary to prevent as well as cure. By preparing for the time when you are attacked, you can respond more adequately in such cases. Managed detection & response (mdr) services can help. This is often thought to be complex and costly and therefore only for large organisations. Is this true?
Poor sleep
Looking at the cost of an external MDR service with 24/7 monitoring for a thousand employees, this comes to around six thousand euros per month. That is often less than one FTE. When organisations set up their own SOC, they need - besides the right people - technology as well. This drives the total cost of ownership of an in-house SOC up to three times the cost of an MDR service.
Overview and control
Setting up a SOC does offer advantages. Organisation-specific risks are understood faster and better by in-house staff. On the other hand, it is difficult to find and retain good people, also due to the pressure and responsibility experienced by the staff involved. Forrester states that 96 percent of security analysts experience personal impact after an incident. Think of overtime, stress about job security and poor sleep. By using MDR services, organisations do not have to take this into account. In addition, it is easier to scale up an MDR service at short notice when needed.
Benchmark research
A benchmark survey by Conscia in collaboration with research firm BenchLab shows that fifteen percent of respondents have now outsourced responsibility for security monitoring. In 55 percent of cases, the in-house IT team is responsible for monitoring and analysing security alerts. In addition, six percent of organisations indicate having their own SOC.
