Information security and risk management challenges are at the forefront of the majority of organisations today. As a result, more and more Value Added Resellers (VARs) are focused on addressing such hurdles while delivering industry independence and separation to ensure that transparent information security enables firms to embrace the changing business climate.

Essential to this is VARs transferring from being a reseller to a services focused provider that offers managed security solutions. This requires a focus on the business issues and a holistic approach to technology along with a clear understanding of a resilient cyber defence architecture and the services to implement each aspect. Typically, VARs have a narrow focus on a limited number of technologies where their expertise is deep but not broad. A services focused company on the other hand has to make the transition to encompassing both a broad and deep understanding of the business challenges just as much as the technologies.

But what do they look like? Essentially, service providers must give organisations access to:

  • Constant threat analysis and risk profiling
  • Greater security expertise
  • Faster user provisioning
  • Outsourcing of administrative tasks such as log management
  • A web interface that allows governance of the security environment and ongoing activities
  • Separation of duties through a strong governance model
  • Security architected into the solution and not bolted on
  • Strong authentication, access and authorisation services
  • Data and information management to meet existing and new regulations

In summary, information security is seen as a niche area and the continued pressure to find the appropriate skills is forcing companies to look for specialised partners who they can trust to make the right business decisions for them in terms of risk management and cyber defence. VARS need to become a part of this future of security and risk management, and this means being forward thinking and positioned for the major growth role they can play in tomorrow’s digital economy. Otherwise, chances are they will find themselves isolated and unable to compete.