News
SolarWinds Security Exec Timothy Brown: MSPs ‘Top Of My Risk Level’
O’Ryan Johnson
‘The MSP is that crown jewel. There’s a few of them inside the organization. They are the most important one because of the reach, and because of the attack service they present, and the risk that they present. If someone gets to us, they get to the MSPs, they get to the clients, and yeah, people are off living on islands somewhere in the South Pacific.’
You said enterprises choose to get hit by cybersecurity attacks. What do you mean by that?
Enterprises that get breached. That was their choice. It seriously was. It was 100 percent their choice. If you look at the attacks that have been successful, most of them have been silly mistakes. Passwords that were stored in the wrong way. Machines that were vulnerable. Systems that weren’t patched. Capital One. For the Capital One breach, she had been fired and she still got back in. How did someone who was fired still have access to data on that system? Is that a matter of not spending enough money? Is that a matter of not having the right priorities? There’s no question that it’s hard to protect everything. But when you have the pockets of a bank, a large, multinational bank, often its arrogance that gets in the way.
You think you are protected. When you think about simple things, like when you are fired all your access goes away in hours, or minutes. That should have been in place for them.
An MSP in a medium business. It’s not their fault, when they get compromised. Enterprises, it is a choice. It is a risk choice that they have made to say ‘Here is my budget. Here is what I’m going to spend on security. Hopefully, I’ve done a good job. Here are my crown jewels. I understand what would be an extinction event for me and I’m protecting against those.’
Learn More:
Managed Security
