A mid-size city outsources after-hours monitoring to an MSSP and pi…

Question

A mid-size city outsources after-hours monitoring to an MSSP and pilots ML-based anomaly detection. What oversight is most important?

Accepted Answer

Oversee the MSSP service levels and continuously validate and tune ML/AI detections against municipal false-positive reality — Outsourcing nights and adding smart alerts does not mean you leave the cockpit. Watch MSSP SLAs and keep tuning the ML so city false positives do not bury real events. Blind trust in every beep is not oversight.

Answer

Accept every MSSP and ML alert as ground truth without validation

Answer

Hide MSSP ticket metrics from the city CISO to avoid awkward reviews

Answer

Disable human review because machine learning never needs tuning

A mid-size city outsources after-hours monitoring to an MSSP and pilots ML-based anomaly detection. What oversight is most important?

Short Explanation

Full Explanation