Theresa is the network administrator for a small organization. The company is fond of a robust and modern network defense strategy but lacks the employees to support it. What would be the best answer for Teresa to use?

Managed security service providers (MSSPs) are an outside company that handles security tasks. Some or even all security tasks can be outsourced, including intrusion detection and prevention (IDS/IPS) management, security information and event management (SIEM) integration, and other security controls. Software-defined networking (SDN) would make managing security somewhat easier but would itself be difficult to implement. Automating as much security activity as is practical and could help alleviate the problem but would not be as effective as security as a service. Finally, only implementing a few security controls would tend to leave control gaps.