https://www.channelfutures.com/wp-content/themes/channelfutures_child/assets/images/logo/footer-new-logo.png
  • Home
  • Technologies
    • Back
    • Analytics
    • Artificial Intelligence
    • Cloud
    • Data Centers
    • Desktop
    • IoT
    • Mobility
    • Networking
    • Open Source
    • RMM/PSA
    • Security
    • Virtualization
    • Voice/Connectivity
  • Strategy
    • Back
    • Best Practices
    • Business Models
    • Channel 101
    • Channel Programs
    • Channel Research
    • Digital Transformation
    • Diversity & Inclusion
    • Leadership
    • Mergers and Acquisitions
    • Sales & Marketing
    • Specialty Practices
  • MSSP Insider
    • Back
    • Business of Security
    • Cloud and Edge
    • Endpoint
    • Network
    • People and Careers
    • Training and Policies
  • MSP 501
    • Back
    • 2020 MSP 501 Rankings
    • 2020 Hot 101 Rankings
    • 2020 MSP 501 Report
  • Intelligence
    • Back
    • Our Sponsors
    • From the Industry
    • Content Resources
    • COVID-19 Partner Help
    • Galleries
    • Podcasts
    • Reports
    • Videos
    • Webinars
    • White Papers
  • EMEA
  • Awards
    • Back
    • Excellence in Digital Services
    • 2020 MSP 501
    • Top Gun 51
  • Events
    • Back
    • CP Conference & Expo
    • Channel Partners Evolution
    • Channel Evolution Europe
    • Channel Partners Event Coverage
    • Webinars
  • Channel Mentor
    • Back
    • Channel Market Intelligence
    • Channel Educational Series
Channel Futures
  • NEWSLETTER
  • Home
  • Technologies
    • Back
    • Analytics
    • Artificial Intelligence
    • Cloud
    • Data Centers
    • Desktop
    • IoT
    • Mobility
    • Networking
    • Open Source
    • RMM/PSA
    • Security
    • Virtualization
    • Voice/Connectivity
  • Strategy
    • Back
    • Best Practices
    • Business Models
    • Channel 101
    • Channel Programs
    • Channel Research
    • Digital Transformation
    • Diversity & Inclusion
    • Leadership
    • Mergers and Acquisitions
    • Sales & Marketing
    • Specialty Practices
  • MSSP Insider
    • Back
    • Business of Security
    • Cloud and Edge
    • Endpoint
    • Network
    • People and Careers
    • Training and Policies
  • MSP 501
    • Back
    • 2020 MSP 501 Rankings
    • 2020 Hot 101 Rankings
    • 2020 MSP 501 Report
  • Intelligence
    • Back
    • Our Sponsors
    • From the Industry
    • Content Resources
    • COVID-19 Partner Help
    • Galleries
    • Podcasts
    • Reports
    • Videos
    • Webinars
    • White Papers
  • EMEA
  • Awards
    • Back
    • Excellence in Digital Services
    • 2020 MSP 501
    • Top Gun 51
  • Events
    • Back
    • CP Conference & Expo
    • Channel Partners Evolution
    • Channel Evolution Europe
    • Channel Partners Event Coverage
    • Webinars
  • Channel Mentor
    • Back
    • Channel Market Intelligence
    • Channel Educational Series
    • Newsletter
  • REGISTER
  • MSPs
  • VARs / SIs
  • Digital Service Providers
  • Cloud Service Providers
  • CHANNEL PARTNERS ONLINE
 Channel Futures

Business Models


Common Mistakes When Writing RFPs for Managed Security Services

Common Mistakes When Writing RFPs for Managed Security Services

  • Written by Mike Baker
  • January 20, 2017
A well-conceived RFP is the first step in choosing an MSSP that your organization can have a long and beneficial relationship with.

Data breaches and other information security threats are on the rise, and the cyber security skills gap is widening.

Many organizations, faced with limited in-house resources, are choosing to partner with managed security service providers (MSSPs) to handle all or specific areas of their information security needs.

Hiring an MSSP allows organizations to focus on their core competencies while benefitting from the expertise of skilled security experts who monitor the system around the clock, usually at a lower cost than hiring security analysts in-house.

In many organizations, evaluating and selecting an MSSP is a process that usually involves writing a request for proposal (RFP).

A well-written RFP is beneficial to the selection process, as it allows an organization to gather and evaluate its options in an orderly manner.

However, a poorly written RFP can result in few or no bids; bids that are too high or unrealistically low; bids that do not address the areas the organization wanted to address; or requirements mismatches (which may not be obvious until after a contract is signed, and results in a failed business relationship).

Among the most common mistakes made by organizations when writing an RFP for an MSSP are:

  • Using an inappropriate RFP template. RFPs, like business cases, are often written using templates. However, many boilerplate templates simply aren’t appropriate for hiring an MSSP because they are geared towards products, not services. Thus, they’ll ask questions that make no sense, such as asking the respondent to list part numbers.
  • Asking questions that are ambiguous, not applicable, and/or duplicative. RFPs are often written by an organization’s procurement department, and the authors may or may not fully grasp what an MSSP does. As a result, they fill the RFP with questions that are unclear or are not applicable to what an MSSP does. The questions may also be repeated throughout the document, each time in a different section and with a different item number.
  • Issuing an RFP that simply makes statements and does not ask any questions. Many times, the “questions” on an RFP for an MSSP won’t be questions at all; they’ll be statements such as “Vendor must meet all contractual obligations,” or “Vendor must have x years of experience.”
  • Not listing the in-house technologies the MSSP will manage or monitor. If an MSSP does not know what technologies it will be working with, it will not be able to provide an accurate bid.

How to Write a Solid RFP for an MSSP

How can organizations avoid these pitfalls and write an RFP that generates good responses from a number of MSSPs?

Following are some tips:

  • First, determine whether an RFP is needed. In some organizations, particularly large corporations and public sector organizations, RFPs are required. A smaller organization, however, may benefit from a less formal selection process.
  • If you’re unsure what you need, consider starting with a Request for Information (RFI). An RFI is perfect in situations where an organization isn’t certain what its needs are and needs more information from vendors to get started. The information gathered from the RFI can be used to issue an RFP later.
  • Come up with a realistic budget. No organization wants to spend more money than it has to, but it’s important that your budget is based on realistic market rates, not just what you’d prefer to pay.
  • Outline clear, precise expectations. This includes listing the technologies the MSSP will be monitoring or managing, both hardware and software, to ensure the most accurate bids as well as the best organizational fit.
  • Ask clear questions that address your organization’s environment and needs. This will allow the MSSP to directly address your organization’s specific needs. Make sure that the IT and procurement departments work together to ensure that the questions are relevant and unambiguous, and that there are no duplicative questions.
  • Do not write a book. Not only are 100-plus-page RFP’s difficult for MSSP’s to answer, reading the responses will be overwhelming. Concise yet comprehensive RFP’s will generate the most responses, and you will be able to evaluate them much more easily.

There are many MSSPs in the market, and not every MSSP is the right fit for every organization.

A well-written RFP is the first step in choosing an MSSP that your organization can have a long and beneficial relationship with.

 

Mike Baker is founder and Principal at Mosaic451, a bespoke cybersecurity service provider and consultancy with specific expertise in building, operating and defending some of the most highly-secure networks in North America.

Tags: Cloud Service Providers Digital Service Providers MSPs VARs/SIs Business Models

Related


  • 501 Somewhere Logo
    It’s 501 Somewhere: Janet Schijns on Transformational Leadership
    Schijns talks about what it takes to be a true leader, transformational technology, and her three steps for success.
  • McAfee Employees Getting Pink-Slipped in Likely 'Belt-Tightening'
    McAfee also reportedly is closing its Israel software development center.
  • Cloud Growth
    SADA SaaS Alliance Aims to Give Members ‘the Best Opportunity to Grow’
    Find out what the managed service provider is doing alongside Google Cloud Platform.
  • Two people in a data center
    The Benefits of Co-Managed IT for Enterprises in the New Normal
    The need to conduct business from anywhere has made enterprises more technology-reliant. Enter co-managed IT.

Leave a comment Cancel reply

-or-

Log in with your Channel Futures account

Alternatively, post a comment by completing the form below:

Your email address will not be published. Required fields are marked *

Related Content

  • COVID-19 Doesn't Stop Record Tech, Telecom M&A in 2020
  • SolarWinds MSP President: Rebrand Will 'N-Able' Partner Opportunity
  • IBM Names CEO of New Managed Services Spinoff
  • Pax8 Follows Wirehive Acquisition with $96 Million in New Equity Capital

Galleries

View all

New, Changing Partner Programs: AWS, Tech Data, Avaya, Verizon

January 11, 2021

Industry Perspectives

View all

The Importance of Being Security-Centric

January 22, 2021

Cyberattacks: Threat Hunters Conquer Unpredictability with 3 Measures

January 21, 2021

The Right Data Migration Tool Helps Schools Move to Cloud During COVID Crisis

January 19, 2021

Webinars

View all

Who’s Behind the Mask? Hacker Personas Explained

January 26, 2021

Your Network Perimeter Has Changed

February 18, 2021

How Managed Hosting Providers Thrive with the Alternative Cloud

February 24, 2021

White Papers

View all

Why Subscription Business Model

January 15, 2021

The Ultimate MSP Guide to Sales Efficiency

January 14, 2021

Eight Reasons Why MSPs Need IT Industry-Specific Sales Tools

January 14, 2021

Upcoming Events

View all

Channel Partners Virtual

March 2, 2021 - March 4, 2021

Channel Partners Conference & Expo

November 1, 2021 - November 4, 2021

Videos and Fastchats

View all

FASTCHAT: How SOAR Eliminates Security Challenges and Elevates Service Provider Revenues

January 6, 2021

Happy Holidays from Channel Partners & Channel Futures!

December 21, 2020

FASTCHAT: How Old, Unpatched Technologies Are Creating New Security Threats for MSPs and Their Customers

December 3, 2020

Twitter

ChannelFutures

.@HPE appoints new head of worldwide distribution. #cloud dlvr.it/RrKJLT https://t.co/FW0OUTDJFF

January 25, 2021
ChannelFutures

Following its acquisition of SAP specialist Pioneer B1, new @SapphireSystems GM reveals "buy and build" growth stra… twitter.com/i/web/status/1…

January 25, 2021
ChannelFutures

.@exabeam, @VulcanCyber, @ntti3, @Vectra_AI, @Lookout and @valtixinc give high marks to @POTUS' federal… twitter.com/i/web/status/1…

January 22, 2021
ChannelFutures

Judge sides with @AWScloud against #Parler; @SADAsystems gets AI-centric board member; @EnsonoIT, @navisite get… twitter.com/i/web/status/1…

January 22, 2021
ChannelFutures

2021 may be the year of the #security-centric #MSP @BarracudaMSP #remoteworking #ITsecurity #dataprotection #RMM… twitter.com/i/web/status/1…

January 22, 2021
ChannelFutures

Adding #AIOps and #AI-driven WANs will help IT administrators move forward, says @MistSystems.… twitter.com/i/web/status/1…

January 22, 2021
ChannelFutures

Microsoft taps @tybryson as corporate VP @msuspartner group @julwhite heading to SAP, @anderson to @Qualtrics.… twitter.com/i/web/status/1…

January 22, 2021
ChannelFutures

#MSPs can inject predictability into #threathunting @Sophos #cybersecurity #ransomware dlvr.it/Rr4ffV https://t.co/Bztc2Yxwvc

January 22, 2021

MSSP Insider

Newsletters and Updates

Sign up for The Channel Report, Channel Futures Update, MSP 501 Newsletter and more.

Live Channel Events

Get the latest information on the next industry-leading Channel Partners event.

Channel Partners Online

Want more? Find more channel news and analysis on our sister site, Channel Partners.

Media Kit And Advertising

Want to reach our audience? Access our media kit

DISCOVER MORE FROM INFORMA TECH

  • Channel Partners Online
  • Channel Partners Events
  • MSP 501
  • MSSP Insider
  • IoT World Today
  • Webhostingtalk

WORKING WITH US

  • Contact
  • About us
  • Advertise
  • Newsletter

FOLLOW Channel Futures ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookie Policy
  • Terms
Copyright © 2021 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.
This website uses cookies, including third party ones, to allow for analysis of how people use our website in order to improve your experience and our services. By continuing to use our website, you agree to the use of such cookies. Click here for more information on our Cookie Policy and Privacy Policy.
X