Bug Watch: Outsourcing antivirus care

Bug Watch: Each week vnunet.com asks a different expert from the IT security world to give their views on recent virus and security issues, with advice, warnings and information on the latest threats.

This week, following last month's Virus Bulletin conference in Orlando where delegates claimed that the two main reasons for not outsourcing antivirus care are cost and trust, Matt Tomlinson, business development director at MIS Corporate Defence Solutions, outlines why he believes a managed antivirus service is the best option for businesses.

It seems that almost every week new research findings are published stating that the risk of cybercrime is rapidly increasing - threatening businesses and highlighting the importance of proactive IT security.

The latest report is from researcher Gartner, which says half of small to medium-sized businesses that implement and supervise their own network security will fall prey to a successful cybercrime by 2003.

One of the most devastating examples of this is a virus hit, as shown by the much publicised 'I Love You' virus which cost UK businesses millions of pounds. With the kind of losses that were incurred from this one virus, the question is whether businesses can afford not to opt for a managed antivirus service. The answer is no.

The antivirus market is already mature with vendors cleverly packaging their software as a modular solution. This, along with the associated hardware costs as well as the need to add another module each time a new user is added to the system, can easily work out to be equal in price to a managed service, but without delivering extra benefits and the peace of mind.

But a fully managed solution goes far beyond the installation phase. A good service will remove hardware and leasing costs, software licences and staffing or training costs. Where there are limited resources for an IT budget, such as in the small to medium-sized enterprise sector, IT responsibilities are often the second job for an employee meaning that, on top of everything else, the individual needs to remember, and be disciplined in, executing antivirus updates.

When updates become available each month, they need to be accessed via the web then downloaded onto the network to maintain optimum security levels. This type of time-consuming antivirus management can easily be overlooked and can lead to virus infiltration, but a managed service removes this headache ensuring that updates are administered regularly and on time.

Most importantly, outsourcing antivirus ensures that experts within the IT security arena constantly monitor a system, checking and cleaning all external communication flowing into the company. With specialist industry knowledge, experts are often privy to the latest virus trends and are clear on what to look for.

This enables them to block a potential threat before it becomes an issue. It also means they are able to check that the software and hardware are working correctly, with the cost onus resting with them if they aren't.

The argument for outsourcing antivirus is compelling, but it can still be hindered by the question of trust. When thinking about appointing a managed service, research can be a valuable asset. As with the appointment of any supplier, investigate the company's pedigree within the field before signing the contract. Ask about the available contingency plans if the worst should happen.

By placing trust in a reputable outsourcing company, businesses can have total peace of mind that their antivirus security is receiving optimum management - empowering professional expertise and cutting-edge technologies, while allowing their own people to concentrate on core business issues. Outsourcing antivirus holds no hidden costs: what you see, is what you get.

Next edition: 27 October