Managed Security Service Provider (MSSP)

What is Managed Security Service Provider (MSSP)?
A Managed Security Service Provider (MSSP) is a type of service provider that provides remote software / hardware-based information or network security services to an organization. An MSSP hosts, implements, and manages a security infrastructure while also providing information security (IS) services to one or more clients.
An MSSP provides a range of IS services including virus scanning, spam blocking, hardware / software firewall integration / management, and general security monitoring / management. An MSSP connects to a company's IT infrastructure via the Internet or a virtual private network (VPN) and has access to the company's key security and operational IT components, while a client accesses an MSSP platform interface to analyze and review the overall status of the security architecture.

An MSSP performs routine security scans, penetration and vulnerability tests, and other security management processes on behalf of an organization. In most cases, an MSSP owns and operates security resources such as virus protection, malware detection, and firewall software. However, an organization can use internal security resources and only outsource its security management and business processes to an MSSP.