IT Vendor Security Checklist
I.T. is a completely unregulated field. Many times, even the most well-intentioned providers are just too small, too busy or too cheap to make the investments needed to properly secure their own network from attack.
The Secret Service has reported a major increase in cyberattacks on IT providers and MSPs in the past two years. More and more cybercriminals are bypassing smaller businesses and taking a run at the bigger prize.
Think about it. If a hacker breaches your network, they get your data. But if they can hack into your IT provider’s network, they get the data of every one of their clients.
Just like you wouldn’t trust a barber with a bad haircut, you shouldn’t trust an IT provider who cannot answer simple questions about the measures they’re taking to keep your business safe.
Five questions to start with
A good IT provider should answer these without hesitation:
Do you use multi-factor authentication on every account that can reach our network?
How quickly are your own systems patched, and who checks that it happened?
Which of your staff can access our environment, and how is that access limited?
Do you carry cyber insurance, and what does it cover?
If you were breached tomorrow, how and when would we hear about it?
If the answers are vague, that tells you something too.
Download our IT vendor security checklist for the full list of questions to ask your IT provider.
