How significant of a threat do supply chain attacks pose to MSPs and MSSPs?
This cat is out of the bag. I was being interviewed about the DHS/FBI report on the nuclear power plant that was breached, and I got asked by the reporter, 'Was that a sophisticated attack?' And I said, 'Do you remember Target? This has been happening for years.' Everybody should be worried. Everybody. But we also can't ask everybody to become a security company or everybody to become a security expert. That's why this human-centric approach is essential. You have to assume one of your employees is going to be tricked and provide an adversary with some access. You have to assume it. If you're living in a bad house in a bad neighborhood and you knew your door literally couldn't be locked, how would you think about protecting your family? You wouldn't go buy locks. You'd think differently, like 'OK, somebody's going to get in.' It's a complete mind shift. You'd start thinking about motion sensors. You'd start thinking about tripwires. You'd start thinking about video cameras. That's where the world is, two out of every three streetlights in London has a video camera on it. Things have gotten that bad. When I see the news now, it's more of the same. You will see people wake up at one point and say, ‘I finally get it.’ It's all about users and data. And everything else should be secondary to that.