CISA and RVAs

In this video, Ryan Weeks and Andrew discuss the CISA Risk and Vulnerability Assessment (RVA) report and its applicability to Managed Service Providers (MSPs). They delve into the importance of addressing common vulnerabilities, enhancing credential security, and the role of phishing-resistant multi-factor authentication (MFA) in cybersecurity. The discussion provides insights into practical steps MSPs can take to improve security measures and highlights the significance of having a well-structured plan to address these risks.

• The migration from Crowdcast version 1 to version 2 involved exporting and importing over 6,000 users, causing multiple registration emails to be sent out to users.
• The CISA risk and vulnerability analysis report highlights the importance of credential security, as valid accounts were frequently exploited in cyber attacks.
• MSPs should focus on implementing phishing-resistant MFA and ensuring that security measures align with frameworks like CIS to enhance protection against common cyber threats.