In the Crosshairs: The State of Security in SLTT and SMB Organizations
summary
State and local governments, SMBs and their MSPs share fragile defenses: surveys of a 11,000+ member ISAC and assessments show controls 1,5,9,11,14 are consistently weak across tens of thousands of entities, MSPs and roughly 32 million downstream organizations. Typical MSP is ~16 people with ~$3M revenue and 87% of SMBs outsource to them. Attack trends are automation targeting unpatched RDP and credential reuse; practical fixes are password managers and offline+online backups, and MFA reduces account takeover by ~99%. Get started with CIS/NIST guidance and basic hygiene.
AI-written summary · about
chapters (9)
- 0:00Intro
- 1:22Tony Sager
- 8:15Lawrence Kranz
- 16:17Harry Purper
- 16:45The Arc
- 22:54Data
- 27:42Reasonable Practices
- 30:53Cyber Security on a Budget
- 31:47The Pyramid Scheme
related talks
22mSemi-Advanced Threats vs the Semi-Critical Infrastructure
29mGet the Freaking Basics Right!
24mCybersecurity Awareness: Small & Medium Enterprises (SMEs)
50mSoftware Supply Chain: Panel on Threat Intel, Trends, Mitigation Strategies
47mFuture Proofing SMBs for the Evolving Global Compliance Landscape
27mProtecting Businesses from Breaches: Simple Lessons Still Unlearned
27mSmall Company, Big Threats: Cybersecurity for the Rest of Us
45mOpening Remarks, Rumblings, Ruminations, and Rants