What is a Managed IT Service Provider?

The coronavirus pandemic led to an increase in working from home. No less than 88% of businesses across the globe encouraged remote working according to a survey conducted by Gartner, Inc.¹

This led to a growing reliance on IT infrastructure to ensure employees could maintain a business-as-usual working day no matter where they were based.²

One of the ways in which many businesses ensure their employees are effective is to have increased IT support. Knowing it is taxing to ask current IT to just work more, many companies have partnered with outsourced IT or a Managed Service Provider (MSP).

IT Managed Service Provider: a definition

An IT managed service provider is an organization that remotely manages a company’s IT infrastructure. This can include the ongoing support of day-to-day maintenance and operation of end-user systems, network, application, and security.

The benefits of Managed IT Services

One of the biggest benefits of partnering with outsourced IT is that you receive the advantages of a large corporation’s IT infrastructure without having to invest in – and provide internal support for – in-house hardware.

Your business will also benefit from the MSP’s specialist knowledge, experience, and expertise, which can lead to time savings and cost savings.

IT Managed Services at Insource

Here at Insource we offer everything up to full IT department outsourcing. When we work with a client we get to know your business and your mission. We then set about protecting your business against the following common IT vulnerabilities:

Systems

IT vulnerabilities:

• Viruses and Ransomware
• Inadequate backups
• Weak security on system access
• Unencrypted data
• Exposed data

Our best practice solution: We ensure enterprise-level antivirus is deployed on workstations and servers; Consistent Windows updates, zero-day vulnerabilities; We ensure everything relevant is backed up onsite, offsite, and immutable; We ensure your recovery point and recovery time objectives can be met; We enforce two-factor authentication on all externally accessible applications; We change default passwords on systems, encrypt all servers and laptops, and deploy Data Loss Prevention tools.

Network

IT vulnerabilities:

• Lack of intrusion prevention or detection systems
• Exposed ports on the firewall
• No controls on device access via wireless or wired
• Using consumer-grade devices for protection
• Allowing 3rd party systems entry into the network without vetting
• Lack of monitoring or logging

Our best practice solution: We deploy network, cloud, and email Intrusion and detection software; We run perimeter network scans and review firewall rules; We configure network access controls, upgrade to enterprise solutions and maintain manufacturer support, and isolate 3rd party vendor access to necessary systems; We setup monitoring and log capture on all systems from network, servers, cloud, software, and access.

Vendors

IT vulnerabilities:

• Trust without verification on security or business continuity
• No change control and proper communication
• Backups of business data on business systems
• Availability of needed resources when you need them
• Quality of expert resources

Our best practice solution: We undertake annual reviews of vendors security reports; We document Change Control with vendors including regular change control meetings and relationship reviews; We confirm vendor support availability and the type of support available; We confirm vendor staff resources and expertise; We check references, request quarterly backups from vendors systems if they host your data, and require BAAs with all 3rd party vendors that have access to PHI.

Staff

IT vulnerabilities:

• Phishing scams
• Password sharing
• Exposing sensitive data via email, USB, etc.
• Ex-employee access
• Malicious intent

Our best practice solution: We implement phishing and virus email prevention software; We deploy monthly staff security training videos including phishing testing; We implement password management tools like LastPass; We implement data loss prevention systems in email and computer to detect and notify improper sharing of data; We limit admin-level access to systems and workstations; We regularly review users and user access to network and software; We utilize E-Discovery on employee’s systems before terminations or during difficult situations.

IT Department

IT vulnerabilities:

• Not following change management
• Lack of documentation
• “Back Doors”
• Sharing system accounts
• No checklists
• Knowing their limits

Our best practice solution: We implement Change Management processes on all systems; We document network, servers, backups, and software; We review all points of entry and remove uncompliant access; We implement separate admin accounts; We utilize checklists and procedures for account creation and exits, server builds, and server maintenance; We contract expertise where necessary to help with architecture or advise before implementation.

To find out more about how we can meet your organization’s IT needs with coverage for increased IT systems, increased working hours, and more, get in touch today.

Follow us on social media here:

Facebook

Twitter

LinkedIn

For anything else, email us at insource@insourceservices.com or call us on (781) 235-1490.

References

• (1) Gartner News: Gartner HR Survey Reveals 88% of Organizations Have Encouraged or Required Employees to Work From Home Due to Coronavirus
• (2) Mordor Intelligence: Managed Services Growth Trends