Mark Taylor, the CTO and co-founder of Chorus, a 24-year-old traditional MSP with a strong Microsoft focus, provided a wealth of knowledge on this subject. He explained that Chorus has three core streams: traditional managed services, a Microsoft-focused Dynamics practice, and a security web practice that has been operating for about five years. 

 

The discussion started with a focus on the evolving threat landscape over the past 18 months. Mark emphasized that security breaches can often be triggered by the simplest mistakes, such as leaving a back door open. MSPs are increasingly targeted by cybercriminals, making security a paramount concern for both MSPs and their clients. 

 

Mark highlighted that, historically, businesses viewed security as locking the gates and fortifying their defenses. However, this approach is outdated. Even if you build strong walls, determined attackers will find a way in. Instead, the new perspective is to assume that they will get in eventually and focus on quickly detecting and responding to threats. This resilience-driven mindset is essential for protecting both MSPs and their clients. 

 

When it comes to starting the journey into managed security services, Mark stressed the importance of implementing basic security hygiene effectively. Properly implemented Multi-Factor Authentication (MFA) is a key component in reducing risks, with studies showing that 98% of risks can be mitigated through these basic measures. Additionally, Mark highlighted the shift from traditional antivirus solutions to Endpoint Detection and Response (EDR) or Managed XDR (Extended Detection and Response) services, which provide more comprehensive threat detection and response capabilities. 

 

Mark clarified that the term MSSP (Managed Security Service Provider) has evolved over time and is now broadly applicable to most MSPs. Even if MSPs are not offering full-blown 24/7 security operations centre (SOC) services, they are still engaging with security discussions and implementing essential security measures. It's a matter of varying degrees of specialization and service offerings. 

 

The conversation then turned towards Chorus's journey in building its own Cyber Security Operations Center (CSOC). Mark explained that their decision to invest in a CSOC stemmed from the need to provide enhanced security services to their larger clients. They recognized the need for faster threat detection and containment, which is achievable with a dedicated CSOC. 

 

Ian inquired about the different security layers within MSPs, including the help desk, the Network Operations Center (NOC), and the Security Operations Center (SOC). Mark clarified that the SOC primarily focuses on monitoring and responding to security threats, ensuring rapid detection and containment. While some MSPs choose to handle security alerts within their organization, others outsource these functions to specialized providers. 

 

They also discussed the differences between Managed Detection and Response (MDR) and Managed Extended Detection and Response (MXDR). MDR initially focuses on protecting endpoints, whereas MXDR extends its scope to cover additional security measures, such as monitoring sign-in logs on domain controllers and analysing email traffic in greater detail. The choice between MDR and MXDR depends on the MSP's and clients' specific needs and risk profiles. 

 

The conversation touched on the adoption of Microsoft's security solutions, with Mark highlighting the attractiveness of Microsoft 365 Business Premium, which includes Defender for Endpoint. Many clients already have these licenses and may opt to leverage Microsoft's security offerings, reducing the need for third-party solutions. 

 

Finally, they delved into the role of Artificial Intelligence (AI) in shaping the future of cybersecurity. AI is rapidly becoming an integral part of security operations, providing quicker insights and decision-making capabilities. While AI enhances security measures, it is not a replacement for human expertise but rather a tool that supports and enhances the capabilities of security professionals. 

 

In conclusion, this episode with Mark Taylor shed light on the evolving landscape of managed security services and the crucial role they play in safeguarding MSPs and their clients. As the threat landscape continues to evolve, it is essential for MSPs to consider adopting managed security services and choose the right security measures to protect their clients effectively. 

 Connect with Mark Taylor on his LinkedIn by clicking HERE 

Or you can also check out Chorus through their website by clicking HERE 

 

Connect with me on LinkedIn and see what I'm up to by clicking HERE  To join our amazing Facebook Group of over 300 MSPs where we are helping you Scale Up with Confidence, then click HERE 

 

Until next time, look after yourself and I’ll catch up with you soon!