Once you define your security program, you still may face additional hurdles. It's no easy feat to find staff completely knowledgeable about the extensive array of security solutions that are available today, which is why the need for third-party specialists is growing.
"It's really rare to find trained security personnel, hiring them is harder, and trying to find credentials that work with the business line is like a search for the holy grail," explains Jim Hurley, an analyst at the Aberdeen Group.
For example, some complex firewalls may take months to set up, implement, and tune. Hurley recommends staff retraining as one solution to this personnel shortage.
Some users are turning to third-party providers to manage Web security, which is a growing trend, according to Aberdeen Group analyst Dan Taylor, who sees outsourced services as a way to eliminate internal management headaches. Another advantage is that they can be budgeted as a monthly expense rather than as an upfront hit.
One such solution is Concentric Networks' Concentric Remote Link, an IP-tunnel-based remote-access service that provides local dial-up access to a corporate intranet.
Users dial into Concentric Networks' private network and are then "tunnelled" via broadband link.
User authentication is performed at the customer's site, which enables the organisation to manage and control its own user database and IP addresses.