Nov 16, 2023
Ep017: The Evolving Cybersecurity Landscape
On this edition of the Advisory Accelerator Podcast, I connected with Shawn Long, the CEO at VI Logics, to discuss how his firm partners with CPAs to help their clients better manage their cybersecurity infrastructure. The threat is real, and there's quite a bit of accounting firms can do to help their clients mitigate this incredible risk. So take a listen and learn more about what it takes to accelerate your firm's advisory potential.
SHOW HIGHLIGHTS
* Shawn Long, CEO of VI Logix, shares his company's approach to providing businesses with a turnkey solution for protection against these threats.We explore the landscape of cyber threats and discuss how AI and automated hacking techniques have made it easier for cyber criminals to target businesses of all sizes.
* We delve into the importance of multiple layers of protection in cybersecurity, using the metaphor of a fortress with firewalls, VPNs, and endpoint protection as various layers of defense. We also discuss the role of social engineering in cyber attacks, using the MGM Las Vegas attack as an example.
* We navigate through the complexities of assessing compliance and risk requirements, a crucial first step in understanding the scope of cyber threats.
* We shift our discussion to the economics of cybersecurity, examining endpoint security pricing and packages and the shared service model as a cost-effective approach to high-level security.
* We tackle the challenges of recruiting and retaining cybersecurity experts, highlighting the importance of having a team of specialists available 24/7 to monitor and respond to threats.
* Sean introduces us to VI Logix's three packages - TSO Light, TSO Standard, and TSO Enhanced - which are designed to meet a variety of needs. He explains how the pricing model works and how it offers flexibility for businesses of all sizes.
* We emphasize the importance of cybersecurity and monthly governance in maintaining a secure digital environment. We also highlight how VI Logix assists organizations in getting onboarded and safeguarded from cyber threats.
* We discuss how cyber criminals are able to target unsuspecting organizations, regardless of size, and the serious repercussions of their malicious actions.
* We delve into the steps that organizations can take to protect themselves from cyber threats, with Sean providing insights on how to create a fortress of protection through different layers of security.
* We conclude the episode by exploring how the pricing models associated with cybersecurity services can work for businesses of different sizes, and the process of getting in touch with a sales representative to learn more about VI Logix's services. LINKS
Show Notes
About viLogics
GUESTS
Shawn Long
About Shawn
TRANSCRIPT
(AI transcript provided as supporting material and may contain errors)
Jeff: Well, hello again everybody. This is Jeff Pawlow, and I am the president of the engineered advisory family of companies and your host for the advisory accelerator podcast, a show that works to help CPAs become more advisory minded in their practices. On today's show, I am happy to welcome Sean Long. He is the CEO at VI Logix, who will help us navigate the incredibly complex world of cybersecurity and how technological threats are becoming more prevalent and worrisome. As a CPA, I'm sure that you've had clients who have turned to you for advice in this area, so I'm really looking forward to the conversation today. Sean, welcome to the advisory accelerator podcast. Shawn: Oh, thank you very much, Jeff, and I'm looking forward to this conversation. Jeff: You know it's interesting how often I am hearing CPAs talk about how often they are hearing their clients approach them about some help in the cybersecurity area. So maybe we can start today with you giving a little bit of background of your firm, what the need was in the market that you sought to fill, and then we can get into some of the nuts and bolts of what's actually going on in the threat environment out there today. Shawn: Oh yeah, sure. So originally I started back in 1996. We actually first got into the IT business being a actual healthcare claim processing at a clearinghouse. So back in the early days we're still using modems and dollops and all that stuff that some people might not even be familiar with today. Security wasn't really a big thing. Right, it was a password because there wasn't any internet, there wasn't any true exposure to what we have today. And so having that understanding of healthcare and how, even before HIPAA was around and the security around it, that kind of how we, how I, developed this into VI Logix, as always being a kind of a security mindset first approach for anything that we do related to IT, and it really is a mindset, isn't it? Jeff: And I think that's evolved, where I think in the past it was like, hey, you hire somebody to kind of manage this and you forget about it, and the complexity of whether it's a phishing scam or some type of active hack or anything that's going on there just becomes more and more sophisticated. And you've got the stuff that's kind of cringy meme worthy where our entire organization received a message from me that I needed them to run out and buy some Apple gift cards, and I think everybody's to the point where they understand, hey, that's not legit, right? Although I did have a few people reach out to ask me how many I needed them to get. But then you've got the stuff that is just uber professional stuff that even somebody that has a mindset and I think I'm pretty savvy on this there was one that was set out from my bank and it was so well done in terms of the email address masking and the quality of the email that I received. But I just kind of thought at the end of the day, well, I don't think they would reach out to me for this in an email, and I called and sure enough, it was a scam, but I'll tell you what that's me and I'm paying attention to it. I can't imagine how many people actually get caught up in that. So maybe talk a little bit about just what you're seeing in the threat environment out there and educate our CPAs on what their clients might be experiencing. Shawn: Yeah, so obviously the whole threat vector we call this tax surface as you refer to it, which is the technical terms, obviously is evolving faster than as we're speaking. It's evolving right. So what I say, even on this call, will probably be different by the time we're done with this call. And one of the biggest things we're seeing, which is really the scariest piece, is the use of AI, artificial intelligence. So we're getting to a point now where, you know, traditionally there was some team of people or could be a lone wolf type of hacker out there. Now it's really just being done automated, which is kind of scary in itself to think about. So obviously the only way to fight fire is with fire, right? So we're saying that you know all these, you know ransomware attacks and so on, and the mindset of I'm too small to be of a valued target. Well, that's not true anymore, because the fact that they can just do gross canopy, you know hack deployments, be it whatever fishing, spyware or you know, you know directory harvesting it's irrelevant because they're using just the volume approach. If I submit 10 million attacks and 3% hit, it's a good day at the office for them and you could be just a small, you know 15 person organization, be whatever, a warehouse or a small bar, restaurant, and it affects you, right, if you were out of business for two or three days or a week, it affects somebody small at that size a lot more than does even larger because, just as simply as a you know, they're living that day to day operational cost. Right, they don't have cash flow like some of the larger organizations. What we're seeing is right is how do you bring enterprise solutions that they need at a cost point that is effective for even the five person organizatio…