Researchers: Managed security contracts that reward providers for notifying clients of breaches provide better security. One variant assesses a penalty if there is a breach, but rewards the provider if they are the ones that reveal it. Another variant uses one provider for the managed security service and another to detect breaches. The research will be presented at the Workshop on the Economics of Information Security (WEIS) 2010 next month. Two-party security services are becoming more common, researchers say, with some signs that using two services might be a better choice.”]
Source: https://www.darkreading.com/analytics/want-better-security-reward-your-provider