Navigating Cybersecurity Gaps: MSP Challenges, CMMC Impact, & Vendor Responsibilities w/ Wayne Selk

Wayne Selk from CompTIA joins host Dave Sobel to focus on the current state of cybersecurity and the challenges faced by Managed Service Providers (MSPs). They delve into CompTIA's recent state of cybersecurity report, which highlights a significant gap between cybersecurity investments and the outcomes achieved. This disconnect raises critical questions about how MSPs can better align their efforts with business objectives to ensure effective cybersecurity practices.Wayne emphasizes the importance of education and training for individuals within the cybersecurity field, noting that many professionals struggle to find the right resources to enhance their understanding of cybersecurity nuances. He points out that while annual security awareness training is beneficial, there is a need for more targeted training that addresses the specific roles and responsibilities of individuals within an organization. This lack of clarity contributes to the broader issue of MSPs not fully grasping the business outcomes they should be aiming for in their cybersecurity strategies.The discussion also touches on the perception of cybersecurity among professionals, with only 25% feeling optimistic about its direction. Wayne argues that many MSP owners come from a purely technical background, lacking the business acumen necessary to develop effective risk management programs. He stresses the need for MSPs to work on their business objectives and create comprehensive business plans that align with their cybersecurity goals. By doing so, they can better prioritize their investments and training efforts, ultimately leading to improved outcomes.As the conversation progresses, Wayne and Dave explore the implications of upcoming regulations, such as CMMC 2.0, and the need for vendors to adopt secure-by-design and secure-by-default practices. They discuss the importance of accountability in the software development process and the potential for regulation to drive change in the tech industry. The episode concludes with a call to action for MSPs to embrace foundational cybersecurity practices and leverage available resources to enhance their understanding and implementation of effective cybersecurity measures. Supported by: https://mspradio.com/engage/   All our Sponsors:   https://businessof.tech/sponsors/ Do you want the show on your podcast app or the written versions of the stories? Subscribe to the Business of Tech: https://www.businessof.tech/subscribe/Looking for a link from the stories? The entire script of the show, with links to articles, are posted in each story on https://www.businessof.tech/ Support the show on Patreon: https://patreon.com/mspradio/ Want to be a guest on Business of Tech: Daily 10-Minute IT Services Insights? Send Dave Sobel a message on PodMatch, here: https://www.podmatch.com/hostdetailpreview/businessoftech Want our stuff? Cool Merch? Wear “Why Do We Care?” - Visit https://mspradio.myspreadshop.com Follow us on:LinkedIn: https://www.linkedin.com/company/28908079/YouTube: https://youtube.com/mspradio/Facebook: https://www.facebook.com/mspradionews/Instagram: https://www.instagram.com/mspradio/TikTok: https://www.tiktok.com/@businessoftechBluesky: https://bsky.app/profile/businessoftech.bsky.social