Navigating Cybersecurity Gaps: MSP Challenges, CMMC Impact, & Vendor Responsibilities w/ Wayne Selk

Wayne Selk from CompTIA joins host Dave Sobel to focus on the current state of cybersecurity and the challenges faced by Managed Service Providers (MSPs). They delve into CompTIA's recent state of cybersecurity report, which highlights a significant gap between cybersecurity investments and the outcomes achieved. This disconnect raises critical questions about how MSPs can better align their efforts with business objectives to ensure effective cybersecurity practices.Wayne emphasizes the importance of education and training for individuals within the cybersecurity field, noting that many professionals struggle to find the right resources to enhance their understanding of cybersecurity nuances. He points out that while annual security awareness training is beneficial, there is a need for more targeted training that addresses the specific roles and responsibilities of individuals within an organization. This lack of clarity contributes to the broader issue of MSPs not fully grasping the business outcomes they should be aiming for in their cybersecurity strategies.The discussion also touches on the perception of cybersecurity among professionals, with only 25% feeling optimistic about its direction. Wayne argues that many MSP owners come from a purely technical background, lacking the business acumen necessary to develop effective risk management programs. He stresses the need for MSPs to work on their business objectives and create comprehensive business plans that align with their cybersecurity goals. By doing so, they can better prioritize their investments and training efforts, ultimately leading to improved outcomes.As the conversation progresses, Wayne and Dave explore the implications of upcoming regulations, such as CMMC 2.0, and the need for vendors to adopt secure-by-design and secure-by-default practices. They discuss the importance of accountability in the software development process and the potential for regulation to drive change in the tech industry. The episode concludes with a call to action for MSPs to embrace foundational cybersecurity practices and leverage available resources to enhance their understanding and implementation of effective cybersecurity measures. Supported by: https://mspradio.com/engage/   💼 All Our SponsorsSupport the vendors who support the show:👉 https://businessof.tech/sponsors/ 🚀 Join Business of Tech PlusGet exclusive access to investigative reports, vendor analysis, leadership briefings, and more.👉 https://businessof.tech/plus 🎧 Subscribe to the Business of TechWant the show on your favorite podcast app or prefer the written versions of each story?📲 https://www.businessof.tech/subscribe 📰 Story Links & SourcesLooking for the links from today’s stories?Every episode script — with full source links — is posted at:🌐 https://www.businessof.tech 🎙 Want to Be a Guest?Pitch your story or appear on Business of Tech: Daily 10-Minute IT Services Insights:💬 https://www.podmatch.com/hostdetailpreview/businessoftech 🔗 Follow Business of Tech LinkedIn: https://www.linkedin.com/company/28908079YouTube: https://youtube.com/mspradioBluesky: https://bsky.app/profile/businessof.techInstagram: https://www.instagram.com/mspradioTikTok: https://www.tiktok.com/@businessoftechFacebook: https://www.facebook.com/mspradionews Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.