As an outsource security partner BAI provides managed security, managed firewall, managed ids, content filtering, internet security, network security, penetration testing, and vulnerability testing.

A: Security is a primary concern for companies of all sizes. This is especially true for information security. Any business involved in e-commerce, database management, e-mail communication and anything else requiring the Internet or networks needs to be concerned with protecting critical information. This goes for all information, both sending and receiving, and is important all the time. A strong perimeter security is often known as the first line of defense.

It's been mentioned before that virus software, firewalls and security policies are a must but not the end all to information security. Assuming facilities are state-of-the-art, 24/7 technical expertise, perimeter monitoring and information management are the keys to building a strong security infrastructure that keeps pace with today's increasingly complex information security threats.

The key to all this is the 24/7 part. The only way for this to happen without a corps of technical analysts and managers is to use automated managed security services.

Industry experts predict that the market for managed services will experience rapid growth, tripling in size between now and 2005. Companies of all sizes are realizing the tremendous amount of resources, time and effort necessary to keep pace with and resolve vulnerabilities specific to their information networks. That's where managed services come in; they automatically address the resource challenges cited above. Managed services also enable IT managers to more effectively focus on their core business and core deliverables to the business.

Until now, organizations faced a confusing array of security threats. Assessment services, available internally, failed to provide expert analysis of real business risks associated with some of today's complex threats. This is primarily due to the rapid pace of change that hackers introduce, the rapid pace at which viruses spread, and, even in today's world, the rapid pace that new threats are developed. It used to be that the lone IT manager could dial up a few patches, consult a few software manufacturers to absolve the threats. No longer. Staying up-to-date with the technology being used in all threats and vulnerabilities is one of the primary advantages of using outsourced managed services. It has gotten to the point of being too overwhelming for the task-laden IT manager within a company.

Just testing is not always the answer either. Companies that conduct frequent testing for these vulnerabilities need to realize that testing is not a one-time activity or an event. Today, the time between vulnerability discovery and Internet-wide exploitation can be counted in days and sometimes even hours. As a result, companies need a continuous protection program to remain secure. Managed service programs outsourced to an information security third party will fulfill this need.

Here are some of the benefits provided by managed information security services:

• Cost-effectiveness: Managed security programs do just that--they manage your security systems, saving you time and money by reducing IT staffing and training.

• Trained and dedicated professionals with a high level of expertise: Typically, security professionals involved in managed service programs are trained to manage an array of security problems and solutions of the latest technology.

• 24/7 management, monitoring and support: Constant monitoring all the time for all systems, maintaining full protection.

• Guaranteed responsiveness: Managed services act the minute a security vulnerability has been breached. The intrusion is detected immediately, the source is identified, and the solution is implemented almost immediately. Having automatic managed services prevents the waiting of a phone call to an IT expert or an approval to take quick action.

Companies that provide outsourced managed services are growing in size and number. Finding the right one for your business will depend on the level of assessment you need to identify the necessary programs. A company's overall security policy and posture come into play also. The best type of company to outsource to is a company that offers the whole package and range of services involving assessing the information security situation, helping with policy development and implementation, and providing continuous, reliable and state-of-the-art managed information security services, all in one.