Is it better to be cyber secure or cyber resilient?
If you think this is a trick question, it isn't. There are many who believe that security is solely a matter of defense. While defensive measure are crucial to any MSP (or their customers), preparing for eventual attacks which are successful, is also crucial.
So, what is an MSP to do? Here are some simple measures every MSP ought to be doing right now to be both prepared for cyber-attacks, but also resilient to them if they are successful.
PlanningDocumenting your plans
Identifying where your risks are
Anticipating those attacks, and eventual breaches
TestingTest means test
Test, and often
Document your test results. Learn from them
MonitoringKeeping a watchful eye on your internal MSP network and IT assets
RMM isn't enough
More Fake MSPs
I no longer trust websites. When you hear this story you may not either. While this story is completely true, it is also, regrettably, a reality we must face as a profession and fix!
Urgent News for Break/Fix Providers
Three decades since the first MSPs were created, we still have IT organizations who are in doubt as to the business model around managed services. If these non-MSPs can't be persuaded based on the logic of the business model alone, perhaps we can present a very real economic motive for getting rid of your break/fix and reactive customers.
Remember, no matter how much your client's try and make you think that reactive IT services are the best for them, they are wrong!