5 cybersecurity procurement tips for any business

By Sean Marcil, managing partner at CirrusTel

In 2020, we had to send our employees home and figure out how they would be able to continue to perform their jobs, virtually, overnight. There was no time to go through the normal procurement cycle, do a proof of concept or truly vet a solution before it had to be placed into production. Even though it has been two years of running applications, equipment or solutions, there is a good chance you have a security gap, or concern, otherwise known as a vulnerability. Vulnerabilities can be devasting to businesses. Ninety percent of businesses without a business continuity and disaster recover (BCDR) plan go out of business (1). Yes, your BCDR plan needs to be part of your cybersecurity plan.

Given the rate of change in technology, applications need constant attention and visibility; even in a zero trust environment. Here are five tips that can help you ensure your business is better protected against cybersecurity threats.

Tip #1: People first. Seventy percent of ransomware attacks start with phishing (2). No matter how great your managed service provider (MSP) is, or what technology you are using to protect against malicious attacks, it only takes one click or download to be compromised. Training your employees, once per year, and making them read a policy is not going to solve phishing. Employees can be tricked to click, especially when they are multitasking. All users in your environment need ongoing training, and coaching, coupled with phishing test emails. There are companies that can assist you in this area, such as KnowB4.

Tip #2: Utilize an MSP. Hiring, and maintaining, a skilled IT staff is challenging, at best, and it is becoming increasingly difficult to retain talented employees. The demand for skilled workers is extremely high and they are routinely contacted by recruiters for positions at better salaries and benefits. If your employee is overworked, overloaded and thus stressed out, the grass is going to look greener elsewhere. By complementing your team with an MSP, you can be more strategic and handle the projects that fit your team’s skillset and/or the “fun stuff.” Let the MSP deal with the tactical items. The MSP provides service for many customers, so they are aware of more threats, sooner, and are better equipped to handle them more efficiently.

Given the cost and risk of a ransomware attack, or data breach, the cost of retaining an MSP is worth it, as you will benefit from the economies of scale that the right MSP provides. According to the FBI, individuals lost $6.9 billion to cybercrime in 2021! (3)

Tip #3: Do Annual Cybersecurity Assessments. The purpose of annual assessments is to understand gaps, risk exposure level, perform a health check to identify any vulnerabilities and determine if previously identified risks have been corrected. Some risks are inherent and cannot be avoided.  Cyber Insurance is highly recommended and Insurance firms will be asking the questions that are a part of this assessment. Also, (i) we recommend that you do not use your MSP to perform the assessment so you have a check and balance in place. (ii) Free cybersecurity gap assessments exist and just because they are free does not mean they are cheap or useless.

Tip #4: Use Disaster Recovery as a Service (DRaaS). DRaaS is a cloud computing service model that allows an organization to back up its data and IT infrastructure in a third-party cloud computing environment and provide all the DR orchestration. This SaaS solution will allow you to regain access, and functionality, to IT infrastructure after an outage. You may feel more in control if you own the redundant equipment, applications and processes; but that does not mean your cybersecurity risk is lower. The right DRaaS solution, and there are many flavors, can empower your team to manage to a service level (SLA). Ensuring it is ready to use (if needed) and backup systems are functioning properly. Most importantly, the DRaaS design should be tailored to use at the rate your business needs. Not all businesses need the same DR plan. This may be an old analogy but some companies still use tape, how many times has the tape been put in, and backup started, only to find out  that it failed.

Sean Marcil

Tip #5: Utilize an Agnostic, Trusted Advisor. Making timely and accurate decisions are paramount to the success of a business. Look for a trusted advisor that has the platform, and experience, to bring value to your team. Trusted advisors should have access to experienced third-party engineers, competitive intelligence, and be able to analyze the landscape of providers and MSP’s to  provide you with a concise report and data so that any of your stakeholders will understand how you selected the end solution.

For more information, contact Sean Marcil: Phone (813) 775-2410 or via email [email protected]

References:

 

You May Also Like
Revolutionize Your Property with Modern Building Services

By Rebekah Nault Upgrading your facility services- including access control, CCTV, cameras, AI and radio technology- has become a simple yet powerful strategy for builders, developers and real estate professionals

Read More
UK startup raises $7.5M, plans U.S. expansion with Tampa Bay Wave’s support

Definition Health, a UK-based health technology startup and participant in the Tampa Bay Wave HealthTech Accelerator, has raised $7.5 million in pre-seed funding to expand its predictive AI platform in

Read More
Source 1 Solutions acquires England-based IT company

Source 1 Solutions, a managed service provider specializing in enterprise IT networks, has acquired YouCall-IT, headquartered in Kent, England. With this acquisition, Source 1 will maintain full ownership, with both

Read More
Tampa Bay Wave announces 2024 FinTech|X Accelerator cohort of startups

Tampa Bay Wave, in collaboration with the University of South Florida’s Muma College of Business, has launched the 2024 FinTech|X Accelerator, featuring a cohort of 10 startups. Powered by support

Read More
Other Posts
Grey Bull Rescue, Costa Sunglasses deliver Thanksgiving relief to Tampa families

Grey Bull Rescue and Costa Sunglasses delivered hurricane relief supplies and Thanksgiving food to Metropolitan Ministries this week. The donation drive, which ran throughout November was a collaborative effort with

Read More
What is your most valuable asset?

By John Hill, managing partner, Hyde Park Capital For many business owners we work with, their most valuable asset is their business. When monetizing the business, and developing an exit

Read More
Veterans Florida and SPC offer Entrepreneurship Program for veterans

St. Petersburg College and Veterans Florida have partnered, for a second year, to offer the Veterans Florida Entrepreneurship Program, designed to help veterans transition to business ownership. The 8-week program

Read More
Sarasota-based luxury handbag brand partners with Proof-it and EM Microelectronic

Sarasota-based luxury handbag brand BSWANKY has partnered with Proof-it and EM Microelectronic to offer a new way for customers to authenticate and trace the provenance of its products. The collaboration

Read More