Growth and sustainability of managed security services networks

An economic perspective

Alok Gupta, Dmitry Zhdanov

Research output: Contribution to journalReview article

21 Citations (Scopus)

Abstract

Managed security service provider (MSSP) networks are a form of collaboration where several firms share resources such as diagnostics, prevention tools, and policies to provide security for their computer networks. While the decision to outsource the security operations of an organization may seem counterintuitive, there are potential benefits from joining an MSSP network that include pooling of risk and access to more security-enabling resources and expertise. We examine structural results explaining the reasons firms join an MSSP network, and characterize the growth of MSSP network size under different forms of ownership (monopoly versus consortium). We find that the need for an initial investment in MSSP networks (which is necessary to overcome the stalling effect) only affects the optimal network size for a consortium but has no impact on the optimal network size for a profit-maximizing monopolist. Our results provide an explanation why the majority of the MSSPs are for-profit entities and consortium-based MSSPs are less common. Such a market structure can be attributed to the potential for larger size by the for-profit MSSP owner combined with beneficial pricing structure and a lack of growth uncertainty for the early clients.

Original languageEnglish (US)
JournalMIS Quarterly: Management Information Systems
Volume36
Issue number4
StatePublished - Dec 1 2012

Fingerprint

Sustainable development
Profitability
Economics
Computer networks
Joining
Sustainability
Costs
Service provider
Uncertainty
Consortium

Keywords

  • Information security
  • Managed security services
  • Network effects
  • Network growth
  • Network ownership structure
  • Outsourcing

Cite this

Growth and sustainability of managed security services networks : An economic perspective. / Gupta, Alok; Zhdanov, Dmitry.

In: MIS Quarterly: Management Information Systems, Vol. 36, No. 4, 01.12.2012.

Research output: Contribution to journalReview article

@article{27ec2265e93641fd9746ff340d7d53b1,
title = "Growth and sustainability of managed security services networks: An economic perspective",
abstract = "Managed security service provider (MSSP) networks are a form of collaboration where several firms share resources such as diagnostics, prevention tools, and policies to provide security for their computer networks. While the decision to outsource the security operations of an organization may seem counterintuitive, there are potential benefits from joining an MSSP network that include pooling of risk and access to more security-enabling resources and expertise. We examine structural results explaining the reasons firms join an MSSP network, and characterize the growth of MSSP network size under different forms of ownership (monopoly versus consortium). We find that the need for an initial investment in MSSP networks (which is necessary to overcome the stalling effect) only affects the optimal network size for a consortium but has no impact on the optimal network size for a profit-maximizing monopolist. Our results provide an explanation why the majority of the MSSPs are for-profit entities and consortium-based MSSPs are less common. Such a market structure can be attributed to the potential for larger size by the for-profit MSSP owner combined with beneficial pricing structure and a lack of growth uncertainty for the early clients.",
keywords = "Information security, Managed security services, Network effects, Network growth, Network ownership structure, Outsourcing",
author = "Alok Gupta and Dmitry Zhdanov",
year = "2012",
month = "12",
day = "1",
language = "English (US)",
volume = "36",
journal = "MIS Quarterly: Management Information Systems",
issn = "0276-7783",
publisher = "Management Information Systems Research Center",
number = "4",

}

TY - JOUR

T1 - Growth and sustainability of managed security services networks

T2 - An economic perspective

AU - Gupta, Alok

AU - Zhdanov, Dmitry

PY - 2012/12/1

Y1 - 2012/12/1

N2 - Managed security service provider (MSSP) networks are a form of collaboration where several firms share resources such as diagnostics, prevention tools, and policies to provide security for their computer networks. While the decision to outsource the security operations of an organization may seem counterintuitive, there are potential benefits from joining an MSSP network that include pooling of risk and access to more security-enabling resources and expertise. We examine structural results explaining the reasons firms join an MSSP network, and characterize the growth of MSSP network size under different forms of ownership (monopoly versus consortium). We find that the need for an initial investment in MSSP networks (which is necessary to overcome the stalling effect) only affects the optimal network size for a consortium but has no impact on the optimal network size for a profit-maximizing monopolist. Our results provide an explanation why the majority of the MSSPs are for-profit entities and consortium-based MSSPs are less common. Such a market structure can be attributed to the potential for larger size by the for-profit MSSP owner combined with beneficial pricing structure and a lack of growth uncertainty for the early clients.

AB - Managed security service provider (MSSP) networks are a form of collaboration where several firms share resources such as diagnostics, prevention tools, and policies to provide security for their computer networks. While the decision to outsource the security operations of an organization may seem counterintuitive, there are potential benefits from joining an MSSP network that include pooling of risk and access to more security-enabling resources and expertise. We examine structural results explaining the reasons firms join an MSSP network, and characterize the growth of MSSP network size under different forms of ownership (monopoly versus consortium). We find that the need for an initial investment in MSSP networks (which is necessary to overcome the stalling effect) only affects the optimal network size for a consortium but has no impact on the optimal network size for a profit-maximizing monopolist. Our results provide an explanation why the majority of the MSSPs are for-profit entities and consortium-based MSSPs are less common. Such a market structure can be attributed to the potential for larger size by the for-profit MSSP owner combined with beneficial pricing structure and a lack of growth uncertainty for the early clients.

KW - Information security

KW - Managed security services

KW - Network effects

KW - Network growth

KW - Network ownership structure

KW - Outsourcing

UR - http://www.scopus.com/inward/record.url?scp=84868029643&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84868029643&partnerID=8YFLogxK

M3 - Review article

VL - 36

JO - MIS Quarterly: Management Information Systems

JF - MIS Quarterly: Management Information Systems

SN - 0276-7783

IS - 4

ER -