MSP Blog Logo


Business Growth


Help Desk



Sales & Marketing


Empowering Your MSP Business to Grow and Prosper—One Post at a Time


Featured Post

The Ultimate Guide to Success in Managed IT Services

What are the fundamentals to building a profitable managed IT services business? Keep reading to discover the four key ingredients for success.

Read Now

How to Expand IT Portfolio Profitability with SIEM

Posted September 5, 2018by Guy Cunningham

How to Expand IT Portfolio Profitability with SIEM

An increasing number of managed services providers (MSPs) are finding competition creeping into their accounts. Inevitably, competition will drive down prices and profitability, unless you can demonstrate to your customer why working with you is worth the extra money.

Maybe you’ve had this conversation recently:

Customer: “Is there anything we can do to reduce our monthly expenses for IT? I received a proposal from another MSP who will provide the same services we get from you for about 20% percent less.”

MSP: “You’ve been with us for five years and we know your network like the back of our hand. Can I see their proposal? Maybe I can show you where the proposals are different.”

If all you’re doing is providing the “typical” services an MSP offers (help desk, anti-virus, firewall, backup, etc.), you’re going to have a hard time retaining your customers and keeping them at the same level of profitability. Think about it this way, do you want your customers to view you as an oil change specialist, or as their expert family doctor?

  • Oil change specialists compete based on price and convenience. There’s very little difference between a Jiffy Lube or a Valvoline.
  • The expert family doctor competes based on relationship and expertise. People don’t typically jump from doctor to doctor based on a lower price.

When you provide your customers with more than a commodity service, their loyalty increases and in turn, your profits increase. So, how do you do that?

One answer is through cyber security. Specifically, with Security Information and Event Management (SIEM) technology.

Leveraging SIEM Technology

Everyone provides anti-virus and firewalls (at least I hope they do). Honestly, can you articulate the value of one anti-virus or one firewall over another? I know I can’t. And frankly, what difference does it make to your customers?

Leveraging the right SIEM solution allows you to demonstrate to your customers that their loyalty to you, and the fees they pay, are worth it. Some of the benefits from the right SIEM solution include:

  • Daily updates on threats stopped, suspicious or new software installed, and potential insider threats that show how you’ve proactively protected the customer before a breach occurred.
  • Oversight of your customer’s whole security posture, across all of their systems, including cloud email like Office 365.
  • Catching more vulnerabilities and stopping more threats than anti-virus and firewalls do.
  • Providing reports that enable your customer to meet PCI DSS, NIST 800-171, and HIPAA compliance.

If you see the potential that additional cyber security services can offer, the next question is, “how do you do it?” You have some choices:

An Example

So, how do you decide if SIEM software or co-managed SIEM is right for you? One way to think about it is to compare Hertz, the equivalent of buying software, versus Uber, the equivalent of a co-managed SIEM.

When traveling on business, I used to rent a car everywhere I went (except New York City).  When renting a car, I have the option of choosing the size car and the route I drive. While I have those freedoms, they come with the cost of gas, parking, speeding tickets, tolls, etc. In addition, I can’t really work while I’m driving. For all of this flexibility, and responsibility, I typically pay $80 - $150 per day.

Today, I just use a ride share service like Uber or Lyft instead of renting a car. I still get from point A to point B, but I’m not responsible for all of the other costs I might incur. I give up some flexibility, but my outcome is the same: Less complicated, and usually less expensive. Plus, I get to work while the driver takes care of me. Both choices have their merits, and both have their tradeoffs. The question you need to ask is, how do I get from point A to point B, and can I achieve my goal with the right price-point.


EventTracker makes securing your customer’s systems easier by providing pre-defined reports, dashboards, and alerts via the SIEMphonic service. If you would like to learn more about Co-Managed SIEMphonic Essentials designed for MSPs, please contact EventTracker at, or talk to your Continuum sales rep.


Handpicked for you:

Download Cyber Security eBook

Guy Cunningham, EventTracker, a Netsurion company, Vice President of Alliances

RMM 101: Must-Haves for Your IT Management Solution
MSP Guide to Managed Services SLAs  [white paper]
comments powered by Disqus