Stephen and Rich answer our viewers' questions. This month...

"I'm a consultant working in various vCSO roles for multiple companies. Recently, I've noticed a troubling trend. Vendors are blatantly lying to SME's that lack cyber representatives and they're getting away with it. One of my customers recently reduced my hours to just a couple per month because the provider of a prominent tool assured them that they had eradicated all cyber risk. When I tried to explain that this was nonsense, they dismissed it as me trying to hold on to my hours. It feels like Cyber Security is the Wild West. Companies can't use fake eyelashes and mascara ads but in Cyber Security anything seem to go. I'm embarrassed and frustrated."

Question: What is happening and how can I address this without looking jealous or like I'm trying to upsell things for myself?