Advanced Security Settings: Elevating MSP Cybersecurity Practices

In the fifth segment of the tech-focused series, the conversation with IT security expert Dan Le continues to explore advanced security settings and best practices for Managed Service Providers (MSPs). This segment provides insights into specific settings and their implications for security. Here’s a summary of the key points discussed.

Understanding CIS Benchmarks and Levels

The discussion begins with an overview of the CIS (Center for Internet Security) benchmarks, which are divided into levels. Level one settings are recommended for all, while level two settings, like blocking Universal Windows apps with Windows runtime API access, are more advanced and may require additional testing due to their potential to disrupt certain workflows.

Autoplay and Auto Run Settings

Dan explains the importance of disabling autoplay and auto run features in Windows. Autoplay automatically executes files from external media like USB drives, while auto run executes commands. Disabling these features is crucial to prevent the execution of malicious software or commands.

The Nuance of Security Settings

The conversation highlights the nuanced differences between settings like autoplay and auto run. Dan emphasizes the importance of understanding these nuances and leveraging resources like CIS, which provide detailed guidance on each setting. This understanding is crucial for MSPs to effectively manage their clients’ security.

Implementing CIS Recommendations

Dan shares his experience with implementing CIS recommendations, noting that most of the settings can be applied without major issues. He advises MSPs to test these settings in a controlled environment before deploying them in production.

The Importance of Hardening the Physical OS

Even for companies that primarily operate in the cloud or through browsers, hardening the physical operating system is crucial. Dan explains that threats like keylogging or screen capturing can still pose risks, regardless of whether the work is done locally or remotely.

Enhanced Anti-Spoofing for Biometric Authentication

The discussion covers the setting for enhanced anti-spoofing, which ensures the integrity and security of biometric authentication systems like fingerprint or facial ID. Enabling this setting provides a more advanced and secure version of biometric scanning.

Advice for MSPs Transitioning to Security Services

Dan concludes by advising MSPs interested in offering security services to start by building their own lab environment and experimenting with various settings. He suggests turning on all the settings to understand their impact and how they operate in a real-world scenario.

Conclusion

This segment provides valuable insights into specific advanced security settings and the importance of understanding and implementing them correctly. Dan Le’s expertise offers practical advice for MSPs looking to enhance their security offerings and better protect their clients in an increasingly complex digital landscape.

Are you ready to transform your cybersecurity approach? Contact Senteon today for a comprehensive risk assessment, and don’t forget to watch the full webinar video for a deep dive into these strategies with Dan Le and other experts. Your journey to cybersecurity excellence starts here.

Full Webinar Episode: https://www.youtube.com/watch?v=IlUmByjgfpU&t=43s