Choosing a Cybersecurity Partner

A guide on how to make an informed decision when evaluating a potential cybersecurity company to work with.

Choosing a Cybersecurity Partner

A guide on how to make an informed decision when evaluating a potential cybersecurity company to work with.

01

Qualification Criteria

Defining qualification criteria for prospective partners helps assess the viability of the firms you are considering partnering with. Here are a few criteria that you should consider when shortlisting your partners:

Qualification Criteria

Defining qualification criteria for prospective partners helps assess the viability of the firms you are considering partnering with. Here are a few criteria that you should consider when shortlisting your partners:

Qualification Criteria

Defining qualification criteria for prospective partners helps assess the viability of the firms you are considering partnering with. Here are a few criteria that you should consider when shortlisting your partners:

1) Age of Company: The age of a company can provide insights into its stability, longevity, and ability to withstand market fluctuations. A well-established company with a proven track record indicates reliability, experience, and the ability to adapt to changing business environments.

2) Skillsets of Company Resources: The skillsets of a partner’s resources are crucial for delivering high-quality services. Assessing the expertise, qualifications, and certifications of the company's employees ensures they have the necessary knowledge and capabilities to meet the project's specific needs. Adequate skillsets enhance the partner's ability to provide valuable insights, implement effective solutions, and deliver results.

3) Experience of Company Resources: Experience plays a significant role in a partner’s ability to navigate challenges, solve problems, and deliver successful outcomes. The experience of company resources demonstrates their exposure to various scenarios, industries, and client requirements. An experienced partner will likely have a deeper understanding of best practices, potential pitfalls, and proven methodologies, contributing to more effective project execution.

4) Geographic Footprint of the Company: For certain projects, it may be important for the partner to have a local presence or familiarity with your organization's target market or region. On the other hand, global projects might require a partner with a widespread presence and the ability to handle operations across multiple locations. Evaluating the partner's geographic coverage ensures they can effectively support the project's needs.

5) Industry Contributions: The partner's industry contributions can provide insights into their thought leadership, innovation, and commitment to the industry. Active participation in industry associations, conferences, or publications demonstrates a willingness to stay up-to-date with industry trends, share knowledge, and contribute to advancements. This indicates that the partner will likely bring a wealth of industry expertise and stay ahead of the curve in providing relevant solutions.

6) Social Proof: Social proof is evidence of a partner's capabilities and customer satisfaction through testimonials, case studies, and references. Social proof provides validation from other clients or industry experts, offering insights into the partner's reputation, credibility, and past successes. It helps evaluate the partner's ability to deliver on promises, meet client expectations, and establish a trustworthy partnership.

Considering these qualification criteria when selecting a partner helps assess their stability, expertise, experience, market presence, industry contributions, and reputation. By thoroughly evaluating these factors, businesses can make informed decisions and choose partners that align with their specific needs, ensuring successful outcomes and long-term partnerships.

02

The Importance of Scoping

The importance of accurately scoping your project cannot be overstated. The ability of a firm to properly scope a project and avoid the dreaded “scope creep” is crucial for several reasons:

The Importance of Scoping

The importance of accurately scoping your project cannot be overstated. The ability of a firm to properly scope a project and avoid the dreaded “scope creep” is crucial for several reasons:

1) Clear Understanding of Deliverables: Proper project scoping ensures a clear understanding of the desired outcomes and deliverables. It involves defining the specific goals, objectives, and requirements of the project in detail. This clarity helps align expectations between the client and the partner, reducing the likelihood of misunderstandings or miscommunications regarding project deliverables.

2) Accurate Cost Estimation: Effective project scoping enables the partner to estimate the cost and resources required for the project accurately. By clearly defining the scope, the partner can identify the tasks, activities, and deliverables involved, allowing for a more precise estimation of the time, effort, and budget needed. This accuracy in cost estimation supports effective budgeting and resource allocation throughout the project lifecycle.

3) Timely Completion: A well-scoped project enhances the partner's ability to plan and manage the project timeline effectively. By understanding the scope of work upfront, the partner can develop a realistic project schedule, allocate resources appropriately, and identify potential bottlenecks or dependencies. This leads to better project management and increases the likelihood of completing the project within the agreed-upon timeframe.

4) Risk Management: Proper project scoping allows for the identification and mitigation of potential risks and challenges early on. By understanding the scope of work and the associated requirements, the partner can anticipate potential obstacles, dependencies, or constraints that may impact the project's success. This proactive approach enables the partner to develop risk mitigation strategies, allocate resources accordingly, and implement contingency plans when necessary.

5) Client Satisfaction: Effective project scoping is vital for meeting client expectations and ensuring client satisfaction. When the scope is well-defined and aligned with the client's needs, it increases the likelihood of delivering the expected outcomes within the agreed-upon parameters. A clear scope minimizes the risk of scope creep, where additional work or changes are introduced beyond the original agreement, leading to client dissatisfaction and potential project delays or budget overruns.

6) Efficient Resource Allocation: Project scoping helps the partner optimize the allocation of resources, including human resources, equipment, and materials. With a clear scope, the partner can determine the specific expertise and skills required for the project and allocate resources accordingly. This ensures the right resources are available at the right time, minimizing unnecessary resource allocation or rework.

7) Change Control: A well-defined project scope facilitates effective change control management. Changes in project requirements or scope are inevitable in many projects. However, with proper scoping, the partner can assess the impact of changes on the project's timeline, budget, and resources. It allows for informed decision-making regarding change requests, ensuring that changes are evaluated, documented, and implemented in a controlled manner.

The ability to properly scope a project is vital for its success. It ensures a clear understanding of deliverables, accurate cost estimation, timely completion, effective risk management, client satisfaction, efficient resource allocation, and proper change control. By investing time and effort in scoping a project accurately, partners can enhance project outcomes, mitigate risks, and deliver high-quality results that meet or exceed client expectations.

03

Requesting Client Reference Calls

Client reference calls can be a valuable opportunity to gather insights and make an informed decision when selecting a partner. Here are some tips on how to get the most out of client reference calls:

Requesting Client Reference Calls

Client reference calls can be a valuable opportunity to gather insights and make an informed decision when selecting a partner. Here are some tips on how to get the most out of client reference calls:

1) Prepare Thoughtful Questions: Before the reference call, prepare a list of relevant questions to ask the client. Focus on specific areas of interest, such as the partner's performance, communication, problem-solving abilities, and overall satisfaction with the services provided. Tailor your questions to gather insights that are most important to your business's needs and requirements.

2) Seek a Range of Perspectives: Request references from multiple clients who have worked with the partner. This will give you a broader perspective and a more comprehensive understanding of the partner's strengths and weaknesses. Aim to speak with clients who have similar business challenges or goals as your own to ensure the relevance of their experiences.

3) Ask Open-Ended Questions: Frame your questions in an open-ended manner to encourage the client to share detailed and honest feedback. Avoid leading or biased questions that might steer the conversation in a particular direction. Instead, allow the client to freely express their opinions, experiences, and any challenges they faced.

4) Dig Deeper into Key Areas: While it's essential to cover a range of topics, pay particular attention to key areas that are critical for your decision-making process. For example, if customer service is crucial to your business, ask the client about their experience with the partner's responsiveness, support, and problem resolution. Use these calls to gather insights that will help you assess how well the partnership aligns with your specific requirements.

5) Listen Attentively: During the reference call, listen attentively to the client's responses and take notes. Pay attention to both positive and negative feedback, as this will provide a balanced perspective. Look for patterns or consistent themes that emerge across different client references, as these can highlight important strengths or potential concerns.

6) Request Examples and Results: Ask the client for specific examples or anecdotes illustrating the partner's performance and impact. Inquire about measurable results or outcomes achieved through their engagement with the partner. This will give you a better understanding of the partner's ability to deliver tangible value and drive positive outcomes.

7) Follow Up on Additional Questions: If the reference call raises additional questions or areas of interest, don't hesitate to follow up with the client or the partner for further clarification. Getting a comprehensive understanding of the partner's capabilities and fit for your business is crucial for making an informed decision.

8) Evaluate the Consistency of Feedback: Compare and contrast the feedback received from multiple client references. Look for consistency in the feedback to identify common strengths or weaknesses. Consider the context and the specific needs of each client when assessing the feedback but pay attention to any recurring patterns that emerge.

By preparing well, asking insightful questions, actively listening, and evaluating feedback consistently, you can gain valuable insights from client reference calls. These insights will help you decide when selecting a partner that aligns with your business objectives and requirements.

"The expertise and professionalism that Lares' Purple Team brings to the table are unmatched. We will definitely be bringing them back for future engagements."
Benjamin Vaughn
SVP & CISO, Hyatt
"They wanted to see us succeed as much as we wanted to see us succeed. This is why, 10 years later, we are still having this conversation."
Jeffrey Hecht
(Former) Chief Compliance & Security Officer, The Word & Brown Companies
"The biggest benefit of having a Lares vCISO is getting guidance on how to tackle security issues and determining a realistic approach on how to address them."
Andrew Casceillo
Corporate Director of Technical Services, Ulbrich Stainless Steel and Speciality Metals Inc.

04

Pricing Warning Signs

When partners charge unusually low prices, it can be considered a warning flag for several reasons:

Pricing Warning Signs

When partners charge unusually low prices, it can be considered a warning flag for several reasons:

1) Lack of Expertise: Partners with significantly lower prices may lack the necessary expertise and experience to deliver high-quality services. Experienced consultants with specialized knowledge and skills command higher rates due to the value they bring. Lower-priced firms may not have the depth of expertise required to address complex business challenges or provide valuable insights effectively.

2) Inadequate Resources: Low prices may indicate that a partner is cutting corners or operating with limited resources. They might not have the necessary tools, technology, or access to data to deliver comprehensive and accurate analyses or recommendations. This can compromise the quality and effectiveness of their consulting services.

3) Reduced Scope or Limited Deliverables: Lower prices could indicate that the partner offers a reduced scope of work or limited deliverables. They may not be providing a comprehensive analysis or only focusing on specific aspects of a problem. This limited approach might not address the full range of a client's needs, potentially resulting in incomplete or suboptimal solutions.

4) Lack of Customization: Cheap consulting services often rely on standardized approaches or templates rather than tailoring solutions to each client's unique situation. This one-size-fits-all approach may not adequately address the specific challenges or opportunities a business faces. Customization is often essential for achieving meaningful and sustainable results.

5) Poor Quality or Ineffective Results: The adage "you get what you pay for" applies to consulting services as well. Extremely low prices may indicate a lack of commitment to delivering high-quality work or achieving impactful results. The partner might prioritize quantity over quality, resulting in rushed or superficial analyses, recommendations, and implementations.

6) Hidden Costs or Upselling: Some partners might initially offer low prices to attract clients but then add extra charges for additional services or necessary resources. These hidden costs can quickly escalate the overall project expenses and potentially exceed the budget. Additionally, low-priced partners may use the initial engagement as an opportunity to upsell more expensive services or engagements.

7) Lack of Client Focus: Lower-priced partners may not prioritize client satisfaction or devote adequate attention to client needs. They may have limited capacity to provide responsive and personalized support or fail to invest in building long-term client relationships. This can result in poor communication, limited availability, and a lack of attention to detail.

While price alone should not be the sole determining factor when selecting a partner, unusually low prices should be carefully evaluated. It is essential to assess the firm's expertise, resources, approach, quality standards, and client focus to ensure that the consulting engagement will be effective, value-driven, and aligned with the business's objectives.

05

Customer Retention

Customer retention is a valuable data point to consider when selecting a partner for several reasons:

Customer Retention

Customer retention is a valuable data point to consider when selecting a partner for several reasons:

1) Partner Reliability: High customer retention indicates that a partner has a track record of satisfying their customers and meeting their needs consistently. It demonstrates that customers are satisfied with the partner's services and overall performance. Selecting a partner with a strong customer retention rate increases the likelihood of a reliable and dependable partnership.

2) Customer Satisfaction: Retained customers imply a high level of customer satisfaction. When customers continue to choose a partner over an extended period, it suggests that the partner is meeting their expectations, providing value, and delivering a positive customer experience. A partner with a high customer retention rate is more likely to prioritize customer satisfaction and invest in maintaining long-term relationships.

3) Trustworthiness and Credibility: Customer retention indicates a partner's trustworthiness and credibility. It implies that the partner has built a reputation for delivering on their promises and consistently providing quality services. Trust is crucial in partner relationships, as businesses rely on partners to fulfill their needs reliably and efficiently. A partner with a strong customer retention rate is more likely to be trustworthy and reliable.

4) Reduced Disruption: Switching partners can be disruptive and time-consuming for businesses. By selecting a partner with a high customer retention rate, businesses can reduce the likelihood of disruptions caused by frequent partner changes. A stable partner relationship improves long-term planning, continuity, and operational efficiency.

5) Strong Partner-Customer Relationships: Customer retention indicates that the partner has established strong customer relationships. These relationships are built on trust, effective communication, and a deep understanding of customer needs. Choosing a partner with a high customer retention rate increases the likelihood of a partner that values customer relationships and is willing to invest in understanding and addressing the specific requirements of their clients.

6) Reference for Decision Making: The customer retention rate can serve as a reference point when making decisions about partners. By analyzing the reasons behind a partner's high retention rate, such as excellent customer service, quality deliverables, or competitive pricing, businesses can identify key factors that contribute to customer satisfaction. This information can help in evaluating other potential partners and selecting the one that aligns best with the business's needs and priorities.

Customer retention provides valuable insights into a partner's reliability, customer satisfaction, trustworthiness, and ability to maintain strong relationships. Considering customer retention as a data point when selecting a partner helps businesses make informed decisions and choose partners who are more likely to deliver consistent value, reduce disruptions, and foster long-term success.

06

Conclusion

Selecting the right partner involves considering a range of qualification criteria and evaluation factors. By assessing stability, expertise, experience, market presence, industry contributions, and reputation, businesses can make informed decisions and choose partners that align with their specific needs. Additionally, proper project scoping ensures a clear understanding of deliverables, accurate cost estimation, and effective project management, resulting in successful outcomes. Conducting client reference calls, evaluating pricing appropriately, and considering customer retention further enhance the decision-making process. By employing these strategies, businesses can foster long-term partnerships and achieve their goals effectively.

Conclusion

Selecting the right partner involves considering a range of qualification criteria and evaluation factors. By assessing stability, expertise, experience, market presence, industry contributions, and reputation, businesses can make informed decisions and choose partners that align with their specific needs. Additionally, proper project scoping ensures a clear understanding of deliverables, accurate cost estimation, and effective project management, resulting in successful outcomes. Conducting client reference calls, evaluating pricing appropriately, and considering customer retention further enhance the decision-making process. By employing these strategies, businesses can foster long-term partnerships and achieve their goals effectively.

Empowering Organizations to Maximize Their Security Potential.

Lares is a security consulting firm that helps companies secure electronic, physical, intellectual, and financial assets through a unique blend of assessment, testing, and coaching since 2008.

15+ Years

In business

600+

Customers worldwide

4,500+

Engagements

Where There is Unity, There is Victory

[Ubi concordia, ibi victoria]

– Publius Syrus

Contact Lares Consulting logo (image)

Continuous defensive improvement through adversarial simulation and collaboration.

Email Us

©2024 Lares, a Damovo Company | All rights reserved.
Privacy Preferences

When you visit our website, it may store information through your browser from specific services, usually in the form of cookies. Some types of cookies may impact your experience on our website and the services we are able to offer. It may disable certain pages or features entirely. If you do not agree to the storage or tracking of your data and activities, you should leave the site now.

Our website uses cookies, many to support third-party services, such as Google Analytics. Click now to agree to our use of cookies or you may leave the site now.