Connect with us

E-Business

Cybersecurity Skills Shortage Ranked as Biggest Risk to MSPs, Clients

Published

on

Kindly share this post

Sophos, a global leader of innovative security solutions that defeat cyberattacks, has released its inaugural “MSP Perspectives 2024” survey report, which found that the biggest day-to-day challenge facing Managed Service Providers (MSP) is keeping up with the latest cybersecurity solutions/technologies, cited by 39% of the MSPs surveyed.

 

Alongside this, MSPs indicated that hiring new cybersecurity analysts to keep up with customer growth and keep pace with the latest cyberthreats were also top challenges.

The survey also reveals that MSPs perceive the shortage of in-house cybersecurity skills to be the single biggest cybersecurity risk to both their own business and their clients’ organizations.

MSPs also perceive stolen access data and credentials and unpatched vulnerabilities to be amongst the biggest security risks to their customers.

The latest State of Ransomware 2024 report found that nearly a third (29%) of ransomware attacks started with compromised credentials, showing the prevalence of this entry vector.

“The speed of innovation across the cybersecurity battleground means it’s harder than ever for MSPs to keep up with threats and the cyber controls designed to stop them.

“When you couple this with a global skills shortage, which has made it infinitely more difficult for many MSPs to attract and retain cybersecurity analyst resources, its unsurprising that MSPs feel unable to keep pace with the changing threat landscape,” said Scott Barlow vice president of MSP at Sophos.

“This is all compounded by the need for 24×7 coverage as indicated in our 2023 Active Adversary report for Tech Leaders, which finds that 91% of ransomware attacks now happen out of business hours.”

In response to this complex threat landscape, there is growing demand for managed detection and response (MDR) services to provide always-on coverage. Currently 81% of MSPs offer an MDR service, and almost all (97%) MSPs that do not currently offer MDR plan to add it to their portfolio in the coming years.

Reflecting the shortage of in-house cybersecurity skills, 66% of MSPs use a third-party vendor to deliver the MDR service and a further 15% deliver jointly through their own SOC and a third-party vendor.

Topping the list of essential capabilities in a third-party MDR provider is the ability to provide a 24/7 incident response service.

MSPs are also streamlining their cybersecurity partnerships, working with a small number of vendors.

The study revealed that over half (53%) of MSPs work with just one or two cybersecurity vendors, rising to 83% that use between one and five.

Reflecting the effort and overhead of running multiple platforms, MSPs estimate that they could cut their day-to-day management time by 48% if they could manage all their cybersecurity tools from a single platform.

Other interesting findings from the report include:

·       99% of MSPs report an increase in demand for cyber insurance-related support, with the most common requests including clients wanting to implement an MDR service to improve their insurability (47%) or to receive help completing their insurance application (45%).

·       MSPs want flexibility from their MDR provider, with 71% saying it is “essential or very important” that the vendor can use telemetry from their existing security tools for threat detection and response.

·       MSPs in the U.S. lead the way in MDR service provision with almost all (94%) already offering MDR, compared to 70% in Germany, 62% in the U.K., and 58% in Australia.

“While MSPs have a huge job to do in protecting their customers against fast moving adversaries, there’s tremendous opportunity to grow their business and profitability if they can find the right security set up.

“The data shows that MSPs are strengthening their proposition and reducing overheads by amalgamating the platforms they use and engaging with third-party MDR vendors to expand their service offerings.

“As they look to build their security offering of the future, they should prioritize vendors that can offer a complete portfolio of industry-best, fully managed security services and solutions,” continued Barlow.

Data for the MSP Perspectives 2024 report comes from a vendor-agnostic survey of 350 MSPs across the U.S. (200), U.K. (50), Germany (50) and Australia (50). The survey was commissioned by Sophos and conducted by research house Vanson Bourne in March 2024.

Read the MSP Perspectives 2024 report for global findings and data by sector on Sophos.com.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Qualified Cybersecurity Staff Shortage Among Key Obstacles in Curbing Supply Chain Risks

Published

on

Kindly share this post

A new global Kaspersky study has identified the lack of qualified IT security workers and the need for global organisations to prioritise various security tasks to mitigate the risk of supply chain and trusted relationship attacks. Both factors are cited by nearly half (42%) of the respondents.

Kaspersky’s recent study* on supply chain and trusted relationship risks showed that supply chain attacks have emerged as a top threat for businesses, with every third organisation hit by such an attack over the past year.

The severity and frequency of supply chain attacks necessitate uncovering the key reasons preventing them from addressing the risks successfully.

According to the survey, one of the key barriers to reducing supply chain and trusted relationship risks is the lack of a qualified workforce. This shortage leaves organisations without the capacity to consistently access and monitor possible third-party vulnerabilities across their ecosystems.

Among other primary obstacles, respondents noted the need to juggle multiple cybersecurity priorities. This reflects the fact that security teams are stretched across too many tasks at once, which might leave supply chain threats unaddressed.

Beyond resource constraints, respondents also point to structural issues: 39% say their contracts lack clear IT security obligations for contractors. Further 32% note that non‑IT security staff often do not fully understand these risks.

Globally, according to the survey, an overwhelming 85% of businesses admit their organisations need to upgrade protection against supply chain and trusted relationship risks, with only 15% of enterprises considering their current security measures effective.

At the same time, the results of the survey showed that current mitigation practices for third-party risks remain fragmented, with no way of protection getting more than 40% of current adopters. Even the most common protective measure, two-factor authentication, is used by only 38% of respondents.

In addition, only 35% of organisations conduct regular reviews of contractors’ cybersecurity postures. As a result, nearly two thirds of businesses lack ongoing visibility into the security of their partners, leaving them exposed to evolving vulnerabilities across their ecosystems.

It’s noteworthy that companies that have already experienced supply chain and trusted relationship attacks tend to adopt stronger security habits. Those hit by supply chain incidents are more likely to request penetration test results (56%), while victims of trusted relationship breaches prioritise checks on compliance with industry standards (56%) and their contractors’ own supply chain policies (53%).

“When security teams are overstretched, understaffed and have to prioritise urgent tasks over long term resilience priorities, organisations are left exposed to threats that can move silently through their provider ecosystem.

“To break this cycle, the industry needs to adopt more unified and consistent mitigation strategies, from standardised contractor assessments to stronger cross‑team awareness. Supply chain security should become a shared, enforceable responsibility across the entire business network,” comments Sergey Soldatov, Head of Security Operations Center at Kaspersky.

Only by implementing preventive measures across the organisation and approaching partnerships with suppliers and contractors strategically can companies reduce supply chain risks and ensure the resilience of their business.

 


Kindly share this post
Continue Reading

E-Business

Study Reveals 83% of Employees Stay Connected to Work During Time Off, Fuelling Digital Anxiety

Published

on

Kindly share this post

A new Kaspersky survey undertaken in the Middle East, Turkiye and Africa (META) region reveals that digital anxiety is becoming a defining feature of modern work culture, as employees don’t disconnect even during their free time and vacations.

According to the findings, 83% of respondents keep an eye on work tasks outside working hours. An overwhelming 85% reply to all work-related messages in instant messaging apps, while the same share (85%) check work emails during their time off – and 81% admit they are responding to work emails while on vacation or in their personal time.

The pressure to remain constantly available is contributing to heightened stress levels in the workplace. Other sources of stress include work issues, for example, 43% experience anxiety after accidentally sending a random message to a work chat.

Interestingly, not all digital mishaps are perceived equally: 40% report that they take it calmly when they send an unfinished email, proving that some mistakes are considered less damaging than others.

Blurred boundaries between professional and personal life, combined with instant communication tools, are intensifying feelings of constant monitoring and fear of making digital errors.

More than a third (36%) of respondents say they feel extremely uncomfortable or even scared if their boss notices them scrolling through social media at work instead of working. The “always-on” culture may undermine employee well-being, increase burnout risks, and reduce overall productivity in the long term.

“Digital anxiety doesn’t just affect employee well-being – it can also increase cybersecurity risks for organisations. When people feel constant pressure to respond immediately to messages and emails, they are more likely to act impulsively, without carefully verifying links, attachments, or sender identities.

This urgency can make employees more vulnerable to phishing, and other scams using social engineering techniques,” comments Brandon Muller, Technical Expert at Kaspersky.

Kaspersky recommends employees to follow the below tips to avoid digital anxiety and associated cyber risks:

  • Slow down before clicking or replying. Digital anxiety can trigger automatic reactions. A short pause to check sender details, URLs, or attachments can prevent security breaches.
  • Treat urgency as a red flag. Cybercriminals often exploit pressure and fear. Always verify unexpected or urgent requests before responding.
  • Avoid handling sensitive information on unsecured networks. Public Wi-Fi, often used when working outside regular hours, increases exposure to cyber threats. Mobile network and VPN should be applied in such cases.
  • Use technologies that will help reduce risks. For example, Kaspersky Premium offers AI-powered anti-phishing features designed to help warn of potential threats.

Businesses can reduce cybersecurity risks related to employees’ digital anxiety by providing regular cybersecurity training that helps staff recognise threats and respond correctly even under stress.

At the same time, organisations should use robust cybersecurity solutions to minimise the impact of human error. Kaspersky Next’s adaptable and robust cloud-native protection, underpinned by an unequalled cybersecurity track record, is one of such products.

Protection solutions for mail servers, such as Kaspersky Security for Mail Server, with anti-phishing capabilities, help to additionally decrease the chance of infection through a phishing email.


Kindly share this post
Continue Reading

E-Business

FG Approves Electric Buses for Civil Servants, Pushes Local Auto Growth

Published

on

Kindly share this post

Federal Government of Nigeria has approved the acquisition of electric buses for civil servants as part of efforts to promote cleaner transportation and boost local vehicle manufacturing.

FG Approves Electric Buses for Civil Servants, Pushes Local Auto Growth

The development was disclosed in Abuja by Joseph Osanipin, Director-General of the National Automotive Design and Development Council (NADDC). Osanipin said the buses would be sourced from local assemblers to strengthen domestic production and stimulate growth in Nigeria’s automotive sector.

He stated: “The initiative is aimed at encouraging the transition to cleaner mobility while creating opportunities for local manufacturers.” According to him, the government has also procured charging infrastructure that will be deployed across parts of the country to support the adoption of electric vehicles.

As part of broader efforts to develop the sector, the council is establishing the Nnewi Automotive Development Park in Anambra State. Osanipin explained: “We are developing the Nnewi Automotive Development Park where we will provide the necessary infrastructure so that users of the park can share facilities.”

He added that the shared infrastructure model would enable investors and manufacturers to operate without bearing the full cost of setting up independent facilities. The council is also seeking additional investment to accelerate the development of the park and attract more industry participants.

Osanipin urged Nigerians to support locally assembled vehicles, noting that increased patronage would help create jobs and drive economic growth. He said the council is providing training to manufacturers and stakeholders to enhance local production of vehicle components such as batteries and tyres.

“The move will reduce import dependence, create employment opportunities, and contribute to the country’s Gross Domestic Product,” he said. The NADDC is also working with the Bank of Industry Nigeria to facilitate the disbursement of the National Automotive Development Fund to qualified stakeholders.


Kindly share this post
Continue Reading

Trending