Cyber for Hire (Video)

A lot of thought goes into which cyber solutions vendors MSSPs ultimately align themselves with. There are many factors to consider: What capabilities do you want to prioritize based on client demand? How do you assess your weak points or gaps in services? And then what are the top qualities in vendors you're looking for? Today's episode will look at some of the key strategies for MSSPs looking to...

It sounds ironic, maybe even a little paradoxical, but it might just take hiring third party to help an organization assess and mitigate the risk posed by their other third-party partners. For organizations that cannot or prefer not to spearhead this task internally, MSSPs can provide a scalable and consistent third-party risk assessment program that yields insightful, enforceable and actionable r...

You're an MSSP that has just experienced a severe ransomware attack that's disrupting your services. How do you make sure that the infection isn't passed along to your clients? And what do you do if sensitive information on your customers has been exfiltrated? In this segment, Cyber for Hire will lay out some of the key initial response steps MSSPs must take when they themselves turn out to be the...

It's not uncommon for IT security professionals and OT engineers to be at odds with each other over cyber governance policies and procedures inside industrial settings. And when the IT professionals work for an outside firm such as an MSP, then that can create another level of separation that can further expand the schism between IT and OT. With that in mind, what are some key considerations that...

When finding cyber talent is difficult, end user organizations often turn to managed security providers to fill the void. But then where do MSSPs turn to hire infosec professionals? What are their top strategies for developing and optimizing talent? And for that matter, what makes a quality MSSP infosec pro to begin with? Who's built for this kind of job, working with multiple clients, not just on...

Let's play the dating game! When pairing up a company with a fractional or virtual CISO, there are a lot of factors to consider. Personalities count, as do cyber skills and IT background, industry sector experience, geographical limitations, and the company's stated core objectives. The available IT expertise on the client's corporate payroll also makes a difference. This session will look at how...

There is a basic expectation that an MSP should create a single, standardized stack of tools that they will use to service every one of their customers. And while that makes perfect sense for the MSP, it puts the client in a tricky position: either abandon the infrastructure and processes they already have in place and make a big adjustment to align with the MSP's standards… or accept that they ca...

It's becoming increasingly difficult to qualify for cyber insurance. Insurance providers are wary of multimillion dollar payouts resulting from costly ransomware attacks, and so the onus is on companies to prove that they can meet certain minimum cyber hygiene standards. One of the potential paths to reach this objective is by contracting a managed security provider who can ensure that you meet co...

Companies must communicate clear expectations when contracting with pentesters, red teams and vulnerability hunters in order to set key ground rules for what data and systems can be accessed, what's off limits and who is responsible if something breaks. Of course, if you set too many restrictions and parameters, then how do you really know if you're safe from malicious hackers, who of course don't...

If you were to ask most companies right now, "Why you have you hired an MSP?" the answer probably would sound something like: "Resources are strained. Talented is limited. So we're outsourcing certain security functions to a firm that has the built-in capabilities to manage this for us." But is the MSSP model becoming more than a convenient economics and personnel decision? Is this actually becomi...