Password Hygiene: A Vital Cybersecurity Assessment for Teams
Our recent launch of the Baseline Employee Cybersecurity Assessment provides MSPs with a new tool to add to their prospecting and baseline risk detection efforts. As an MSP, it gives you the opportunity to show prospects and clients that human security plays a key role in protecting their organization and that without proper ongoing training, employees are an easy entry point for cybercriminals.
While a security risk assessment will identify gaps in a business environment, the human element should never be overlooked or assumed to be foolproof.
Cybersecurity Agents Unite!
It’s holiday blockbuster season! The time of year when the big screens are full of movie releases that are expected to pull in the crowds that want to watch Marvel and DC Comic heroes unite to save the world. They come from all realms to fight the dark forces that threaten humanity. Together they will save the planet and it usually happens while the human race is blissfully unaware of the dangers that lurk in unknown territories, as they work silently and slowly to initiate our demise and take over the planet.
How to Create an Incident Response Plan [Update]
We often discuss the proactive approach that you should take when it comes to cybersecurity. Security risk assessments will identify the gaps, ongoing training will help to strengthen the human risk factor, and tools like Catch Phish will keep the team engaged and learning along with those training programs. But the fact is, you can’t eliminate all the risks that your clients face when it comes to experiencing a data breach. That means that having an incident response plan (IR) should be on your list of “must-haves” when it comes to smart cybersecurity.
Do Your Healthcare Clients Need an Annual Checkup?
Do Your Healthcare Clients Need an Annual Check-Up?
As a Managed Service Provider, you’re in the business of keeping other businesses running. Which vertical they are in, or what products and services they provide may not be the most pressing detail.
Unless you’re talking about healthcare. There are two common views when it comes to supporting clients in the healthcare industry and those are: support their network and leave HIPAA out of it, or to avoid taking on those clients altogether because of the complexity of HIPAA.
Reasons to Perform a Security Risk Assessment
Performing a Security Risk Assessment (SRA) is one of the things that Managed Service Providers can utilize as a way to solidify their client relationships and grow their business. Offering it to existing clients is a way of showing your value as well as helping them to strengthen their security posture. You can engage with potential clients by offering to do an assessment for them.
Additionally, businesses that are in healthcare and fall under HIPAA compliance are required to perform an assessment annually, so it can be used as a tool to strengthen and build those relationships. However, doing so with all of your clients should be a part of your plan regardless of the industry that they work within.
Inside Threat
The threat to a business from outside perpetrators is very real when it comes to cybercrime. But sometimes the threat comes from within, and it is even harder to detect or prevent in the first place.
Why would someone try to intentionally hurt the very company that provides them with a paycheck? The reasons vary, but there are a few that are repeat offenders. They include stealing proprietary information to take to another job, selling to the competition, or working with cybercriminals to provide the foundation for an attack.
Collective Action Against Cybercrime
Last week the President met with leaders in the private sector as well as those in education to discuss the need to address cybersecurity threats to the nation and efforts needed across the board. The increase in incidents and the ongoing threat of attack is something that transcends all the invisible borders that we put on humans or businesses. In other words, cybercriminals don’t care about your race, religion, income, or the industry that you work within. Data is valuable to them however it needs to be obtained and whatever information it can provide – it all adds up.
Normalizing Breaches
In August of 2019, Facebook was the victim of a data breach that compromised information from 533 million people from 106 different countries. Why is this in the news now? Because the breach was addressed in a recent email from Facebook management, and that email was accidentally sent to a Belgium-based news outlet and, in that email, they don’t seem too concerned.
Small Business Exposure
When you’re a small business, you hope for exposure. But recently, we learned that the Small Business Association (SBA) was the victim of an incident that exposed user data in a less than positive way. This occurred at the end of March, about two weeks into the official COVID-19 crisis for the United States, and at the beginning of the relief efforts that were being established.
The exposure was on the SBA’s online portal where nearly 8,000 applicants provided personal information in the process of seeking emergency loans.
When the Threat Is Inside the Building
Insider Threat
A recent discovery of a breach of customer data at Fifth Third Bank uncovered a troubling truth. It wasn’t hackers outside the United States that had accessed the information, it was intentionally handed over by employees.