The Hidden Dangers of an Unregulated Cybersecurity Industry

It is well known that our industry operates in an unregulated field. Indeed, with just a credit card, anyone can become an MSP (Managed Service Provider) in about ten seconds. These “chuck and truck” providers offer their “IT expertise” without much effort. Their appeal lies in:

• Cheap Prices: They undercut established competitors.
• Responsiveness: Being small, they can quickly address issues.
• Nice Websites: They mimic larger companies at a fraction of the cost.

However, this convenience comes with a significant risk to your business. Unlike other professions, where qualifications and certifications are mandatory, the cybersecurity and IT support industry lacks such regulation. This absence creates knowledge gaps and security vulnerabilities that may remain unnoticed until it’s too late.

Why you should be concerned

If you are an attorney you have to be a member of the State bar, ensuring that you have some degree of competency in the arena you practice.

Should you be a doctor, a dentist or a CPA again you have passed and continue to educate yourself via continuous education to retain your "qualification" or "certifications".

Yet in the cybersecurity and IT support industry, you can fly by the seat of your pants with none of that. That creates huge knowledge gaps, and huge security risks to your business that you will not even know until it's too late.

“If you think it’s expensive to hire a professional to do the job, wait until you hire an amateur.”

Improvement on the Horizon

Efforts are underway to enhance professionalism and accountability in the industry. People like Amy Babinchak and organizations like the National Society of IT Providers (NSITSP) are leading the way. Yet, ongoing education and professional advancement remain optional.

Yet, ongoing education and professional advancement remain optional.

What Can We Do?

While industry regulation may not be imminent, business owners can take steps to protect themselves:

• Due Diligence: Select providers carefully. Look beyond attractive websites and consider their security practices.
• Security Discussions: Engage providers in conversations about security. Can they articulate good security practices compared to their peers?
• Risk Reduction: Ask how they will improve security and reduce your business risk.

For now, we’re on our own when choosing providers. Let’s make informed choices despite the industry’s lack of regulation.

Securely yours,

Scott