Cyber Security Business

Right now you have an explanation on certifications, why security is a problem and the services you offer but why would I pick you over anyone else? I know the who and I know the what but give me the why.

IRJ

@Breffni-Potter said in Cyber Security Business:

Right now you have an explanation on certifications, why security is a problem and the services you offer but why would I pick you over anyone else? I know the who and I know the what but give me the why.

Pricing is the main sell. I just made that page public about 20 minutes ago. Most security firms won't charge less than $10k for a pen test and they don't work with small companies that can't afford security.

selectcybersecurity.com/pricing

wirestyle22

@IRJ Where are you guys based out of?

IRJ

@wirestyle22 said in Cyber Security Business:

@IRJ Where are you guys based out of?

Central Florida - Orlando area

FiyaFly

@IRJ said in Cyber Security Business:

@Breffni-Potter said in Cyber Security Business:

Right now you have an explanation on certifications, why security is a problem and the services you offer but why would I pick you over anyone else? I know the who and I know the what but give me the why.

Pricing is the main sell. I just made that page public about 20 minutes ago. Most security firms won't charge less than $10k for a pen test and they don't work with small companies that can't afford security.

selectcybersecurity.com/pricing

From that page:

Hackers seek low hanging fruit and small business generally have little to no security.

I would change the wording on this to "...Small businesses don't always have the budget for sufficient security to prevent these attacks"

I know a one-man IT shop or two who might take offense to that original wording.
Marketing. Saying the same thing as the other guy, but saying it better.

Deleted74295

What WP Theme are you using? A lot of the content is not aligned (i.e pricing 1 is lower than 2 and 3)

scottalanmiller

@FiyaFly said in Cyber Security Business:

From that page:

Hackers seek low hanging fruit and small business generally have little to no security.

I would change the wording on this to "...Small businesses don't always have the budget for sufficient security to prevent these attacks"

I would not because it's not true. SMBs can often afford to do things well. They choose not to, it's not the same at all.

FiyaFly

@scottalanmiller said in Cyber Security Business:

@FiyaFly said in Cyber Security Business:

From that page:

Hackers seek low hanging fruit and small business generally have little to no security.

I would change the wording on this to "...Small businesses don't always have the budget for sufficient security to prevent these attacks"

I would not because it's not true. SMBs can often afford to do things well. They choose not to, it's not the same at all.

But I also feel like saying small business generally have little to no security is a blanket statement that's not necessarily true either.

scottalanmiller

@FiyaFly said in Cyber Security Business:

But I also feel like saying small business generally have little to no security is a blanket statement that's not necessarily true either.

But it is absolutely true. Generally SMBs have little to no security. More often than not, they actively disable default security.

FiyaFly

@scottalanmiller said in Cyber Security Business:

@FiyaFly said in Cyber Security Business:

But I also feel like saying small business generally have little to no security is a blanket statement that's not necessarily true either.

But it is absolutely true. Generally SMBs have little to no security. More often than not, they actively disable default security.

Well, then I must have gotten the smart few who have at least some security, and I can't necessarily say 'little' or 'bad'.

Not saying you're wrong. I just find it odd, from an anecdotal level. Not enough to argue I'm right, but enough to want to look up some statistics on this.

Dashrender

@scottalanmiller said in Cyber Security Business:

@FiyaFly said in Cyber Security Business:

But I also feel like saying small business generally have little to no security is a blanket statement that's not necessarily true either.

But it is absolutely true. Generally SMBs have little to no security. More often than not, they actively disable default security.

My users certainly would if allowed!

Dashrender

@FiyaFly said in Cyber Security Business:

@scottalanmiller said in Cyber Security Business:

@FiyaFly said in Cyber Security Business:

But I also feel like saying small business generally have little to no security is a blanket statement that's not necessarily true either.

But it is absolutely true. Generally SMBs have little to no security. More often than not, they actively disable default security.

Well, then I must have gotten the smart few who have at least some security, and I can't necessarily say 'little' or 'bad'.

Not saying you're wrong. I just find it odd, from an anecdotal level. Not enough to argue I'm right, but enough to want to look up some statistics on this.

I think it has more to do with how the end user perceives their environmental stress.

In the small offices I've done support for, where people are mostly task oriented, the employees don't seem to mind security, at least to a certain degree.

But those in a (what they believe to be) a high(er) stress environment - nurses, medical personal, public interactions - they push back because they see it as slowing them down.

Example with a nurse - they might walk away from their computer 400 times a day, that means locking the computer 400 times and unlocking it 400 times, all while be yelled at by a doc demanding xyz.

scottalanmiller

@Dashrender said in Cyber Security Business:

Example with a nurse - they might walk away from their computer 400 times a day, that means locking the computer 400 times and unlocking it 400 times, all while be yelled at by a doc demanding xyz.

In a REAL demanding environment, that doctor would get in trouble for social engineering - pressuring people to violate security rules for his own gain. This is an HR problem, HR not holding workers accountable to providing a safe, efficient work environment.

Now making computer security efficient in that kind of environment is important. But thinking that disabling security can even be suggested means they aren't cut out to work in medicine and don't understand their role in protecting patients.

Dashrender

@scottalanmiller said in Cyber Security Business:

@Dashrender said in Cyber Security Business:

Example with a nurse - they might walk away from their computer 400 times a day, that means locking the computer 400 times and unlocking it 400 times, all while be yelled at by a doc demanding xyz.

In a REAL demanding environment, that doctor would get in trouble for social engineering - pressuring people to violate security rules for his own gain. This is an HR problem, HR not holding workers accountable to providing a safe, efficient work environment.

The docs aren't demanding it - I feel this is a user perception, just not a reality.

Now making computer security efficient in that kind of environment is important. But thinking that disabling security can even be suggested means they aren't cut out to work in medicine and don't understand their role in protecting patients.

OH definitely, the users don't care about the patients or their security/protection of. What's so damned funny is that they all claim they do, but either don't know, don't care, or don't understand how security is just as vital to drawing blood is to the care/protection/well being of their patients.

scottalanmiller

@Dashrender said in Cyber Security Business:

@scottalanmiller said in Cyber Security Business:

@Dashrender said in Cyber Security Business:

Example with a nurse - they might walk away from their computer 400 times a day, that means locking the computer 400 times and unlocking it 400 times, all while be yelled at by a doc demanding xyz.

In a REAL demanding environment, that doctor would get in trouble for social engineering - pressuring people to violate security rules for his own gain. This is an HR problem, HR not holding workers accountable to providing a safe, efficient work environment.

The docs aren't demanding it - I feel this is a user perception, just not a reality.

No, but they are yelling. Why are they yelling?