Tips to select cyber security vendors

  1. Home

In cyber security world, whether it is a technical bug finding stream or a certification for some compliance, it is usually tough to decide on how to select a vendor.

This becomes particularly difficult when the history of selection shows that money should be the criteria, while on the other hand, different vendors provide a large deviation in the cost proposals.

To avoid this confusion and help everyone make a correct pragmatic and cognitive decision, below list may help in the selection.

Checklist to select security consultants

Is there firm in existence in the industry for a longer time duration?

Are the owners/directors technically sound?

Is the overall management exhibiting experience from wider industries and not just IT?

Is their firm certified with ISO27001, GDPR, SOC2?

Is their firm certified with ISO9001 to endorse quality in their services?

Do they have partnerships with similar other established brands ?

Are they ready to commit to protect privacy of your data?

Do they themselves follow incident management process?

Are their tech management teams certified?

Are their operations teams adequately experienced?

Are they using industry standard tools?

Are they focusing on human interaction than automated tools?

Are the secure in terms of their own physical premises?

Are they providing additional help to walk through the services outcome?

Are their technical teams exhibiting real tech knowledge than bookish knowledge?

Do they outsource work to other layer of subcontractors?

Are they ready to let perform assessment audit?

Are they auditing themselves periodically to ensure continued self-security?

VAPT Vendor selection

VAPT (Penetration testing) of any kind, requires a highly experienced and technically super-sound vendor. Such consulting companies need to have a base of customers who can vouch for their services and quality of the pentesting reports. While there is a big list of pentesting companies, there are only certain companies which are the best cyber security consulting companies. VAPT is an art and not an easy task. Such top vapt firms tend to satisfy the vendor selection checklist provided above. Contact us for your information security queries.