Call us now:
According to US security services MSPs are being increasingly targeted by hackers. Who use MSP services to ‘springboard’ into the networks of their customer. With the increased use of MSP services it can be easier for a hacker to target a single MSP who may provide services to multiple clients, rather than target end users directly.
For end users using MSPs to deliver solutions can make sense, but it increases the corporates digital and data foot print and physical perimeter. Which subsequently moves out to the service provider, along with the obligation for the provision of security. The concern raised by the US security services goes some way to highlight the obligations of organisations to secure their data and information, be that PII, FCI, CUI or corporate IP.
Under GDPR a data controller is responsible for PII no matter where it resides. You can out source the provision of digital services but you cannot outsource the obligation to protect the data. With regulations like NYDFS, EU-NIS or CMMC you cannot outsource the obligation for corporate security either.
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6687336275973828609