How to Apply Geoffrey Moore's model for MSSP vs Own Security Services

CISO Viewpoint

You can use this framework to decide between using a Managed Security Service Provider (MSSP) or maintaining an internal Security Operations Center (SOC):

Geoffrey Moore's model, particularly his "Crossing the Chasm" framework, can be very insightful when deciding whether to own a cybersecurity service internally or opt for Managed Security Service Providers (MSSPs).?

Applying to MSSP vs. Internal SOC

Major Point to Review

1. Identify your target market segments.
2. Understand the specific needs and preferences of your target customers within each segment
3. Clarify the value proposition of each option. Owning the service internally may offer greater control, customization, and potentially lower costs over time.
4. Be mindful of the challenges in transitioning from early adopter

By applying Moore’s model, you can systematically evaluate whether to build internal capabilities or leverage MSSPs in cybersecurity, ensuring alignment with market demands and maximizing your competitive advantage.