Qualys launches mROC Partner Alliance for cyber risk

Qualys has announced the Managed Risk Operations Center (mROC) Partner Alliance, designed to allow select partners to offer an integrated managed service for identifying and mitigating cyber risks.

The Managed Risk Operations Center (mROC), powered by Qualys Enterprise TruRisk Management, aims to help partners articulate cyber risk in terms of business risk. This initiative is expected to provide qualified Managed Service Solution Partners (MSSPs) with the opportunity to enhance their service offerings.

According to Qualys, many organisations struggle to manage the high volume of risk findings spread across disconnected tools, resulting in inefficiencies and missed threats. Qualys seeks to address this issue by transforming Cyber Risk Management with the Risk Operations Center (ROC), utilising its Enterprise TruRisk Management. This platform consolidates various risk insights into a unified view, quantifying and communicating cyber risk in terms of business value at risk—potential monetary, trust, and productivity loss—and automating risk reduction processes.

For optimal use of the Risk Operations Center, Qualys recommends leveraging trusted partners who can streamline cyber data aggregation, apply industry-aligned risk models, and provide continuous risk monitoring. These partners support Chief Information Security Officers (CISOs) in effectively conveying risk to executives by quantifying it in terms of Value at Risk (VAR) and ensuring alignment with the organisation's risk tolerance.

Mark Thornberry, Senior Vice President of Vendor Marketing at GuidePoint Security, expressed support for the initiative, stating, "Given the increasing complexity of the attack surface, Qualys' mROC will be extremely valuable in helping our clients identify and mitigate risk." He added, "Qualys continues to empower its partners with cutting-edge solutions that enable organisations to stay ahead of evolving threats, enhance operational efficiency, and implement a proactive approach to mitigating risk. We're excited for this evolution."

The mROC Partner Alliance allows MSSP partners to translate cyber risk into business language through services powered by Qualys Enterprise TruRisk Management. It supports a quantitative, comprehensive, and strategic approach to managing cyber risk.

Partners in the mROC Partner Alliance can expand their service offerings with Cyber Risk Advisory Services, Onboarding and Integration Services, Continuous Risk Monitoring Services, and Risk Remediation Services. These services aim to provide a more strategic and value-added service approach, aligning resource allocation with business objectives and delivering actionable insights and expert remediation support.

Sumedh Thakar, President and CEO of Qualys, stated, "Establishing a Risk Operations Center as a centralised, proactive cybersecurity management platform is a key strategy for CISOs aiming to systematically reduce risk while enhancing operational efficiency and business resilience." He further noted, "With mROC, CISOs have access to an ecosystem of partners who operationalise the ROC and serve as strategic risk advisors. For MSSPs, mROC unlocks a valuable revenue opportunity, empowering them to deliver comprehensive cyber risk management—including risk aggregation, quantification, monitoring, and remediation—powered by Qualys Enterprise TruRisk Management."