If you're going to hire some 3rd party to audit your corporation's network safeguard systems, some thought needs to be given to what comprises a "good" one? To paraphrase, you need to know that the person you hire is not only capable of performing the job, but can be trusted with your delicate information, and access to your company's network.
The basics still apply here. Google them, particularly Google them regarding bad reviews, negative ratings, or beefs against them. That is step one, and a thing you must do with any seller you plan to use.
2nd is usually to talk with them on the phone or face to face if you can organize it. If you're not technically inclined, get somebody from your IT staff to have that conversation for you. You are not looking for anything express here, but instead, just to be certain the seller you choose for the job has a working experience of networks and security. You would be surprised by the things some people will try to pass themselves off as in order to part you from your cash, so a little checking up front can save you a lot of grief later .
Ultimately, do not be shy about asking for references, and then follow up and contact the references they supply you. So regularly a request is created for references, and when they are supplied, it never goes any further than that. This is stupid. Anybody can write a name and a phone number on a bit of paper and give it to you. Do not believe what must be the oldest trick in the book. Pick up the telephone and spot check! Call 1 or 2 and get a sense for how the folks listed feel about the service and level of information they received for their money.
Network security is too important to leave anything to chance. You owe it to oneself and to your company to select wisely when picking an independent security consultant.
The basics still apply here. Google them, particularly Google them regarding bad reviews, negative ratings, or beefs against them. That is step one, and a thing you must do with any seller you plan to use.
2nd is usually to talk with them on the phone or face to face if you can organize it. If you're not technically inclined, get somebody from your IT staff to have that conversation for you. You are not looking for anything express here, but instead, just to be certain the seller you choose for the job has a working experience of networks and security. You would be surprised by the things some people will try to pass themselves off as in order to part you from your cash, so a little checking up front can save you a lot of grief later .
Ultimately, do not be shy about asking for references, and then follow up and contact the references they supply you. So regularly a request is created for references, and when they are supplied, it never goes any further than that. This is stupid. Anybody can write a name and a phone number on a bit of paper and give it to you. Do not believe what must be the oldest trick in the book. Pick up the telephone and spot check! Call 1 or 2 and get a sense for how the folks listed feel about the service and level of information they received for their money.
Network security is too important to leave anything to chance. You owe it to oneself and to your company to select wisely when picking an independent security consultant.
0 comments:
Post a Comment