How MSPs Can Cash
The term “personal information” is now incredibly broad—it includes geolocation data, cookie data and even health, sleep and exercise data, said global security evangelist Tony Anscombe, in a special presentation by CompTIA’s IT Security Community. That broad definition is also at the heart of the California Consumer Privacy Act (CCPA), which goes into effect January 1, 2020 and acts a lot like Europe’s new standard, the General Data Protection Regulation (GDPR).
“It’s like GDPR in that it puts the ownership back in the hands of the consumer,” said Anscombe.
Though not as restrictive as its European predecessor, the CCPA still offers the consumer rights: the right to know, right to deletion, right to opt out and right to be free from discrimination. While it might be a hassle to some, it’s also an opportunity. Reasonable security at the CCPA level includes at least four services that solution providers can can offer their clients, Anscombe said.
“This is a revenue generator. You should be offering this as a service,” he said. To help solution providers get started, here are three ways to cash in on CCPA:
Build Customized Packages
Managed services providers and IT security companies have long relied on security assessments to generate leads, and you can do the same type of thing with CCPA. Go in, assess and build an offer based on a bespoke compliance plan.
Reasonable security at the CCPA level involves segmentation (firewalls), that a system is secure by design (internal and external), that the company address vulnerabilities, offers endpoint and protection, quality backup and recovery plans, and documented employee security awareness training.
Documented employee security awareness training is something you should be doing anyway, said Lysa Myers, security researcher for ESET and vice chair of the IT Security Community. “If you’re not requiring them to do security training, that puts more risk on you,” she said.
More Info: net+ certification salary
“It’s like GDPR in that it puts the ownership back in the hands of the consumer,” said Anscombe.
Though not as restrictive as its European predecessor, the CCPA still offers the consumer rights: the right to know, right to deletion, right to opt out and right to be free from discrimination. While it might be a hassle to some, it’s also an opportunity. Reasonable security at the CCPA level includes at least four services that solution providers can can offer their clients, Anscombe said.
“This is a revenue generator. You should be offering this as a service,” he said. To help solution providers get started, here are three ways to cash in on CCPA:
Build Customized Packages
Managed services providers and IT security companies have long relied on security assessments to generate leads, and you can do the same type of thing with CCPA. Go in, assess and build an offer based on a bespoke compliance plan.
Reasonable security at the CCPA level involves segmentation (firewalls), that a system is secure by design (internal and external), that the company address vulnerabilities, offers endpoint and protection, quality backup and recovery plans, and documented employee security awareness training.
Documented employee security awareness training is something you should be doing anyway, said Lysa Myers, security researcher for ESET and vice chair of the IT Security Community. “If you’re not requiring them to do security training, that puts more risk on you,” she said.
More Info: net+ certification salary
Comments
Post a Comment