The FBI advisory to private sector industries was released and raises some interesting questions regarding MSPs. While not specifically mentioning MSPs by name, the advisory covers general threats from ransomware and how they are being executed.

Doesn't mention MSPs, but they are clearly being addressed in this notice

3rd parties and legitimate system tools

All the guidance the FBI provides is already well established in the MSP Verify program

 

Unmanaged Devices - still think break/fix is an effective IT management model?

“80 to 90 % of all compromises originate from unmanaged devices...Most human-operated ransomware attacks attempt to compromise or gain access to unmanaged or bring-your own devices (personal devices used to access work-related systems and information). These typically have fewer security controls and defenses" - Microsoft

 

If you read this Microsoft quote and still think reactive IT is a viable business model or IT management model, think again.

 

I would like to encourage those MSPs out there attempting M&A strategies to consider this challenge for 2024. You may be surprised by what I have to say, but if you think about it I hope you will see the logic and value behind it.

Market/customer expansion

Revenue doubling