Your IT support team, or Managed Service Provider (MSP), just got a clear guide on how to keep your business safe from digital threats.
Recently, Acronis, a company known for its cybersecurity tools, released important advice for MSPs. They highlighted that the software MSPs use to manage all your computers and systems, called Remote Monitoring and Management (RMM) software, is a big target for hackers. Think of RMM software as the master key to your entire digital house. If that key isn't secure, everything inside is at risk.
Acronis pointed out eight key areas MSPs should check when picking or using RMM software. These range from making sure software updates (patches) are applied quickly, to tightly controlling who can access your systems (privileged access). They also cover what happens if something goes wrong, like having a solid recovery plan, and making sure your data is kept separate from other companies using the same MSP (tenant isolation). This is similar to how a good apartment building makes sure each tenant’s apartment is truly separate, even though they share the same building management.
The core issue here is that RMM tools give MSPs a lot of power over your systems, which is great for quick fixes and maintenance. However, this also means if a hacker gets into the RMM system, they could potentially access every single client that MSP serves. This is why securing these tools is so crucial, it’s not just about one company, it’s about a whole chain of businesses that rely on that MSP.
This guidance from Acronis comes at a time when we're seeing more and more sophisticated attacks targeting the supply chain, meaning hackers go after a service provider to then get to their customers. We’ve seen similar warnings from groups like the Cybersecurity and Infrastructure Security Agency (CISA) about securing software that has widespread access. If you work with an MSP, consider asking them about their RMM security practices and how they implement these types of controls.
Ensuring your IT support’s tools are secure is a critical step in protecting your own business from evolving cyber threats.