Hello from the other side of a MSP Third-Party breach

We all say to our clients, it’s not if, it’s when. What happens when it happens to you as the MSP?

This session takes on the real-world example of a third-party breach that impacted Colton Computer Technologies in 2024. The good, the bad and the ugly.

From the notification by the supplier on 21st August 2024 to eight months later, you’ll hear how it goes from being a fire hose directly at your face to still working through cost recovery and righting your business financially.

How does everyone derisk their relationships, from the MSP upstream to supplier, from the client to the MSP, the provision of cyber insurance (yes, it’s worth it, and you need more coverage than you think). Is cyber insurance part of your supplier assessment protocol, and is it part of your client fit assessment?

Who’s right when the lawyers take control? Is rapid response really rapid response? Top tip: not when lawyers are involved! We’ll address the pros and cons of going faster than the lawyers recommend and the downstream impacts that has.

As a third-party breach, dealing with regulators, government departments and notification campaigns becomes more complex. Layered with apathy from within the community, the onus shifted hugely to Colton Computers to ensure all legal requirements were met and understood. How do you get buy in and understanding from a community that seemingly just goes ‘oh well?’

And not to be forgotten is the human element. As a business owner, an incident becomes your life. And when you’re also a business owner responsible for the comms management and leading this for your client but potentially impacted by the breach as well, everyone’s priorities shift. What’s the cost to your business, fiscally, emotionally, trust and reputation?

Hear from four key people who bring their own perspectives. The MSP (Mitch), the broker (Levi), the client doubling as comms guru (Kristal) and the lawyer (Reece) on how they came together to support Colton and its clients through this. The team will take you through the lessons learned, the communication strategy, the battles fought and what clients are saying post-incident.

With the biggest question being, would we do anything differently next time?