Visit the crayon.com enterprise site
Crayon Channel APAC

Search

Become a Partner Partner Login
Crayon Channel APAC

Search

Simplify Cybersecurity

Simplify Cybersecurity

Is cybersecurity too hard for the average MSP to take on?

We gathered up experts from Crayon, usecure and DNSFilter to tackle this question and found that maintaining a strong cybersecurity practice doesn’t have to be complex.

In many cases, simplified security solutions can be the most effective way to combat cyber threats.

Watch the full discussion and get a snapshot of key takeaways below.

 

 

  • The key cybersecurity risks for small, medium and large business in 2024
  • What a simplified cybersecurity posture entails
  • The opportunity for MSPs and resellers looking to simplify cybersecurity posture
  • The opportunity for customers looking at simplified security solutions
  • Common cybersecurity objections and how to address them
4 Key Takeaways

4 Key Takeaways

1. Set course around common cybersecurity gaps

Small to medium sized businesses (SMBs) commonly have gaps in how they secure identity, endpoints, applications, email and web. Multifactor authentication, EDR, basic email and web filtering will reduce the chances of the most common scam tactics being successful. Solutions like those from DNSFilter provide partners with simple yet powerful ways to get improved cybersecurity posture underway for your customers. Leverage the Technology Advisory Council at Crayon to guide you on the best combination of services and solutions that make sense for your business, and that will help you get a baseline cybersecurity posture in place for your SMB customers. To understand the techniques, tools and practices used by cybercriminals, take advantage of free information and resources like our blog on how to leverage the Essential Eight in your practice, or The Cyberoperatives Field Guide, which breaks down attack scenarios and sequences that target platforms, identity, endpoints and data.

 

3. Mitigate humans as the weakest link

Low security awareness amongst company employees will typically eat even the best technical strategy for breakfast. A high percentage of breaches in Australia and New Zealand start with straightforward tactics that are successful because humans with low security awareness take the bait. Recent reports from the Office of the Australian Information Commissioners (OAIC) show most of the notifiable breaches involved a multi-party breach, and nearly 1/3 of those were caused by human error.  Multi-party breaches are very high where service providers hold data for customers. That means offering security awareness training is a simple proposition that is in the best interest of customers and partners alike. Talk to your Crayon representative or to the TAG team about how solutions from usecure and Layer 8 are used to improve security awareness. Partners that can help their customers to make people part of a comprehensive cybersecurity solution will have a competitive advantage.

 

2. The greatest risk is not always obvious

A real business risk today is customers not understanding and knowing what is in their environment, especially when it comes to business applications. If you can’t see it, you can’t manage it. If you can’t manage it, you’ve got next to no chance of securing it. Partners need to work really closely with their customers to understand the whole environment and the rhythm of their business, because some customers honestly believe they don’t have anything to protect. Sometimes the greatest risk is hidden in something that isn’t even considered. That can mean the greatest competitive advantage is knowing how to spot it. The Crayon Cyberchat podcast provides additional insights and guidance, including tips on how to take a consultative approach to customer objections.

 

4. Size of the business does not define the scope of the opportunity

The number of employees and potential seats in a business has been a common yardstick for partners when assessing a new business opportunity. This makes sense if your business model is based on volume licensing margin, but less so for cybersecurity practice builds. Industry is a better measure, as this helps partners develop a picture of the business application categories that may be in use, the data those applications will generate, and the regulatory controls that apply.

Gino Barletta provided a great example of this in the Simplify Cybersecurity webinar when he said “we had one company with 15 staff, so the automatic assumption might be this is a small business that won’t have a need or the budget for cybersecurity. They were financial brokers that managed $200 million in funds and had 30 terabytes of highly classified financial data and personally identifiable information. They needed enterprise-grade everything.”

 

Related