For eSentire's Managed Risk Programs, how can we balance the comprehensiveness of security assessments with the need to minimize disruption to client operations?

Introduction

Balancing the comprehensiveness of security assessments with minimizing disruption to client operations is a critical challenge for eSentire's Managed Risk Programs. This trade-off involves ensuring robust security measures while maintaining client productivity and satisfaction. I'll address this by examining key factors, proposing metrics, and outlining an experimental approach to find the optimal balance.

Step 1

Clarifying Questions (3 minutes)

• Based on the current market landscape, I'm thinking security threats are evolving rapidly. Could you share insights on the most pressing security concerns our clients are facing?

Why it matters: Helps prioritize assessment areas and potential disruptions Expected answer: Ransomware and supply chain attacks are top concerns Impact on approach: Would focus on these areas in assessments, potentially requiring more invasive checks

• Considering our business model, I assume we have different tiers of service. How do our Managed Risk Programs vary across client segments?

Why it matters: Allows tailoring of solutions to different client needs and expectations Expected answer: We offer basic, standard, and premium tiers with varying assessment depths Impact on approach: Would design flexible assessment protocols for each tier

• Looking at user impact, I'm curious about the typical operational hours of our clients. Are we dealing mostly with 9-5 businesses or 24/7 operations?

Why it matters: Influences when and how we can conduct assessments with minimal disruption Expected answer: Mix of both, with a significant portion operating 24/7 Impact on approach: Would necessitate a more complex scheduling system for assessments

• From a technical standpoint, I'm wondering about our current assessment methodologies. What's the balance between automated scans and manual penetration testing?

Why it matters: Affects the level of potential disruption and comprehensiveness of assessments Expected answer: 70% automated, 30% manual, but looking to increase manual testing Impact on approach: Would explore ways to make manual testing less disruptive

• Regarding resources, how scalable is our current assessment team? Are we constrained by personnel or tools?

Why it matters: Determines our capacity to implement more comprehensive or frequent assessments Expected answer: Team is at 80% capacity, tools are sufficient but could be optimized Impact on approach: Would focus on efficiency improvements and potential automation