Most people assume that the term “IT” encompasses cybersecurity. This assumption leads SMB owners, in particular, to make some mistaken assumptions about their cyber risk. A number of our SMB owners come to us when their “impromptu IT” runs into a significant incident. As we’ve written about before, these impromptu IT folks are usually drafted into this position by default as they try to handle their own work duties in addition to IT. These incidents can be wide-ranging – from breaches to outages to hardware/software failures.
It is notable that while some of these impromptu IT folks are familiar with IT support, businesses that rely on impromptu IT are often behind the 8 ball when it comes to cybersecurity. This is because, while there is significant overlap, IT and cybersecurity are not the same, and helpful IT guys may not be familiar with cybersecurity practices or may not have access to appropriate cybersecurity tools.
IT Services include things like:
- Help Desk services
- Computer monitoring and maintenance
- Hardware replacement and support
- Software support
- Vendor liaison (say, calling the ISP when the internet goes down)
- IT Projects like hooking up new computers and printers, cabling new spaces, or replacing servers
Cybersecurity includes thinks like:
- Password and Endpoint protection
- Network security and firewall protection
- Log monitoring / SIEM (e.g., collecting, storing, and analyzing information like user activity, network incidents, and traffic)
- Backup (including backup security!)
- Email monitoring
- Content filtering
If your IT Managed Service provider is worth their salt, they are doing basic IT AND cybersecurity for you. At BIT Services, we don’t offer any package which covers only IT while leaving out cybersecurity. However, we can offer cybersecurity stand-alone packages for businesses that have their own capacity for basic IT.
While the techniques and tactics are distinctive, businesses MUST have both. A business that has poor cybersecurity practices leaves itself open to very significant basic IT problems.
If you are a business owner with an IT MSP, you need to make sure that you are getting coverage for both cybersecurity and Help Desk-type services. If you are not getting that cyber coverage, you’ll want to add cybersecurity services immediately, as your cyber risk remains high without those techniques and practices.
If you are a business owner with impromptu IT, you’ll almost certainly need cybersecurity coverage (and likely a Managed Service Provider as well!). Even if you have the most skilled impromptu IT guy, MSPs like BIT Services have access to sophisticated monitoring tools that put a set of outside eyes on your system.
Business owners can’t afford to make incorrect assumptions. You shouldn’t make the common mistake of assuming that, since you have some IT basics covered, you are automatically protected from cybercrime. Ask some questions of your IT Services Provider (especially if you have an “impromptu” IT department!) and make sure that your business is protected.