Fundamental Cybersecurity For Managed Service Providers

Developed by subject matter experts who are members of the CompTIA ISAO, this whitepaper provides the fundamental aspects of cybersecurity that a managed technology solutions business serving small-to-medium businesses needs to understand and implement. It is meant to help anyone seeking guidance—or is maybe overwhelmed by—implementing sound, best practice cybersecurity operations, technology, and behavior.

Each topic is expanded with a brief definition of what it is, why it is important to address, and who are some resources that could help. The following topics are covered by this white paper:

• Acceptable use policy
• Password policy
• Next generation firewalls
• Advanced endpoint defense
• Protective filtering
• Patch approval & management
• Data backup
• User awareness training
• Two-factor authentication
• Network assessment
• Domain Name System (DNS) security
• Dark web monitoring
• Business continuity/disaster recovery
• Risk assessment
• Third-party vendor risk management
• Incident response
• Risk management