Managing Cybersecurity in Uncertain Times

There’s no magic bullet. But one key is to embrace technologies that improve efficiency, flexibility, and control.

Nobody knows how the economy will perform in 2025. For cybersecurity businesses—and managed security service providers (MSSPs) in particular—the unknown looms.

The economy depends on macro factors we don’t get much of a say in: trade wars, actual wars, climate disasters, inflationary pressures, supply chain issues, and political volatility just about everywhere. Economically speaking, the coming year could be as great as the optimists predict, or turn out to be extremely challenging.

So, how can MSSPs and other security businesses get ready for what lies ahead, when the only real certainty is uncertainty?

There’s no magic bullet. But one key is to embrace technologies that improve efficiency, flexibility, and control. For cybersecurity teams, security operations (SecOps) platforms are an excellent way to do this.

How SecOps platforms hedge against the unknown

First, a clarification. When I say “SecOps platforms,” I’m referring specifically to the type of solution we’ve been building at LimaCharlie. I’m not talking about what some vendors try to pass off as cybersecurity platforms: bundles of poorly integrated point products or opaque all-in-one toolsets.

A real SecOps platform must be well-integrated and transparent. It should give teams core cybersecurity capabilities in a manner that supports modern security operations at scale. API-first access, multi-tenancy, automation, and infrastructure as code (IaC) control are table stakes.

A public cloud-like delivery model (everything available on demand, pay-per-use pricing, etc.) is also crucial in this context. Cybersecurity teams need the same flexibility that has driven public cloud adoption in IT—especially in times of uncertainty.

I often talk about SecOps platforms as enablers of better security outcomes. But from a business operations standpoint, they’re also an excellent way for MSSPs to make it through a turbulent period and emerge unscathed, or even stronger than before, on the other side.

This is because SecOps platforms help security businesses:

Adapt

Pay-per-use pricing, on-demand capabilities, and IaC controls help MSSPs respond to shifting market demand for security services.

In a downturn, MSSPs can reduce a deployment without getting stuck paying for licenses they’re no longer using, having to renegotiate contracts, or being dropped into a different pricing tier.

If business is booming, teams can quickly add endpoints or expand a service offering for an existing client—without having to meet with vendor sales teams or enter into protracted negotiations. Multi-tenancy and IaC also make it easier to onboard new clients using pre-configured tenants and reusable code templates.

Consolidate

The integration and consolidation offered by SecOps platforms allow security businesses to optimize infrastructure spending no matter what’s happening in the market.

If budgets are strained, a SecOps platform can help MSSPs cut operating costs by eliminating one-off tools from their stack and replacing them with platform capabilities. This lets firms reduce spending without changing their core service offerings. It also makes labor spending more efficient, because skilled team members can focus on higher-value tasks instead of tool management.

In good times, an MSSP can invest engineering resources in more ambitious projects to capitalize on the consolidation offered by SecOps platforms. For example, a firm might take advantage of the opportunity to develop a custom EDR capability, gaining independence from their legacy EDR vendor.

Automate

The automation capabilities offered by SecOps platforms benefit security businesses in almost any climate.

During a hiring freeze, automation can be used eliminate manual workflows, helping team members work more productively without burdening them unfairly.

In a period of growth, platform automation is even more essential, because it enables scalable operations and workflows. Firms can accept new business with confidence knowing that a new client won’t produce a 1:1 increase in workload.

Communicate

SecOps platforms are the antithesis of that “just trust us, you’re safe” attitude so common among legacy cybersecurity vendors. There are no “magic-box” components in a true SecOps platform. Teams can see and control their infrastructure—and thus establish provable security.

The cybersecurity value of that is obvious. But there’s an important business benefit as well, because service providers can use platform transparency and visibility to show customers exactly how they’re protected.

If clients are facing budget woes and thinking about cutting back on their security spending, it’s critical for MSSPs to highlight the value of their services demonstrably and objectively.

In better times, clearly communicating value to clients also makes it easier to justify price increases that improve margins and overall profits.

Deliver

On-demand, pay-per-use capabilities let MSSPs roll out a new service offering without having to take on another vendor or commit to another long-term contract.

In a difficult, highly competitive economy, this means MSSPs can still say “yes” to their customers’ niche requests. They don’t have to worry about the cost and complexity of onboarding a new tool to service a single account.

In a strong economy, on-demand capabilities allow service providers to take advantage of new opportunities more efficiently. SecOps platforms abstract away infrastructure complexity, making it possible to bring a new product or service offering to market quickly without sacrificing quality.

The best way forward, come what may

No one has a crystal ball. But as cybersecurity practitioners, preparing for the unexpected is what we do.

MSSPs need tools that help them to respond to unforeseen challenges…both technological and economic.

SecOps platforms give teams the agility, control, and scalability they need. That’s better for security. It’s better for business. And it’s the best way for service providers to navigate an uncertain future.