Commercial Integrator + Security Sales May 2024 - 12

THE SERVICE DESK
MSP Community Talks Security
Awareness Training, Key Tools
Six members of The ASCII Group discuss their unique approach to security awareness training,
as well as the tools that they recommend. Compiled by Dan Ferrisi
IN THIS SPECIAL edition of
Commercial Integrator's " The Service
Desk " column, our editors ask six leading
members of The ASCII Group to share
their insights on security awareness
training. The ASCII Group is, of course,
the oldest and largest independent IT
community in the world, boasting
1,300-plus MSP members from across
North America. Our panelists are Felicia
King, vCISO and security architect, Quality
Plus Consulting (QPC); Zina L. Hassel,
CEO, ZLH Enterprises; Carl de Prado, CEO
and founder, A2Z Business IT; Mike
Bloomfi eld, president geek, Tekie Geek;
Joshua Liberman, president and founder,
Net Sciences, Inc.; and Ron Cotsopoulos,
operations manager, Kobus Technologies.
Together, they touch on a range of
topics, including how they off er security
awareness training, which tools they
recommend and whether some clients still
prioritize convenience over security. We
hope you enjoy the conversation.
Commercial Integrator: Is security
awareness training part of what you
typically off er - or off er on request -
to your clients?
Felicia King: QPC always recommends
cybersecurity awareness training with
phishing testing/training, dark web monitoring
and training, and a company policy
distribution and attestation system.
Every single organization's cyber insurance
policy requires cybersecurity
awareness training. It is not legally
defensible for an organization to have no
cyber awareness system in place, nor is
it legally defensible for an organization
to have a system that is functioning only
in a theatrical way. This means that the
system must be good, and all staff must be
enforced - at the HR management level -
Members of The ASCII Group believe that, while progress has been made to change
behaviors and attitudes toward cybersecurity, there's still quite a long way to go.
to have ongoing, weekly participation that
is meaningful.
Zina L. Hassel: Although we do not perform
this service, we do regularly inform
clients and prospects of the absolute
importance of cybersecurity training. I
make that distinction because there is
also the physical security aspect, which
does have an overlap but is oſt entimes
quite diff erent. The awareness training
is also something that many insurance
companies are currently requiring.
Carl de Prado: Security awareness
training is an integral part of our
services. For small businesses, their
employees are critical in protecting the
company and their clients' data and
livelihood. We are so passionate about it
that we off er it by default. Over the last
three years, I have trained and educated
more than 2,000 professionals on how
to prevent costly cyberattacks in their
businesses. It keeps in line with our company's
focus on our clients being able to
sleep at night, knowing their business
environments are protected.
12 Commercial Integrator+Security Sales & Integration | May 2024
Mike Bloomfi eld: Yes, security
awareness training is a core part of what
we off er to our clients. We believe that
empowering employees with knowledge
and awareness about cybersecurity
threats is as crucial as implementing
robust technical defenses. We off er this
training both as a standard part of our
service package and on request, tailoring
the program to suit the specifi c needs and
risks faced by each client. Employees are
the weakest link of any security program,
so doing everything we can to train them
goes a long way.
Joshua Liberman: User training is in
our security plan, and that is included on
every plan. However, even though it is
available to all, at no additional charge,
without the commitment of clients' leadership,
it does not gain traction. At best, we
see 20% adoption of any training off ering.
Ron Cotsopoulos: I feel that this is
so necessary to businesses that I offer
it in my base package. The first place
a breach happens is with the people
behind the screen.
FUNTAP/STOCK.ADOBE.COM

Commercial Integrator + Security Sales May 2024

Table of Contents for the Digital Edition of Commercial Integrator + Security Sales May 2024