Cybersecurity Insurance: An Every Day Conversation

An MSP technician pushes a CEO to enable multi-factor authentication and endpoint detection for a cyber insurance questionnaire. Mike resists, misunderstands EDR as a pill, then agrees. Minutes later he reports missing files and a skull icon on his screen, suggesting ransomware.
Chapters
Hey Mike, you know I love your MSP. You got a minute? I got a quick question for you. Hey, yeah, what's going on, man? So like, I got this thing on my computer and I don't exactly know what to do about it. Oh yeah, sure, no problem. We can totally get that done. But first, let's get that insurance questionnaire done. We're almost to the end of it. Oh yeah. Okay, cool. No, no, no. That makes total sense. So like, it's just that this is kind of important. Yeah, but you said the insurance thing was important too, right? Oh yeah, well, no, definitely it is. I mean, that's important too. It's just I'm kind of stuck at the moment. Okay, yeah, yeah, sure. No, no, we can do that. Like, I'll help you out with that for sure, but we're almost done with the insurance questionnaire. I just got a couple last questions for you and then we'll be done, okay? Oh, okay, shoot. All right, cool. So right here it says that you need to have MFA, multi-factor authentication, rolled out for everyone. Yeah? Yeah, well, uh, you've not been doing that. You haven't been doing that for years, man. I've been telling you literally year after year you've got to get MFA rolled out. Meh, I mean, well, come on. It's not really that big of a deal if you think about it. Well, apparently insurance thinks it is. I mean, come on, man. Okay, okay, look, I'll talk to my people about it, alright? Wait, what are you talking about, people? You are the people. You're the CEO, man. Well, I mean, like, my friends. Like, my other CEO friends. I just want to see what they're doing about it first. Come on, man. Man, don't do me like that. I'm a professional here. Treat me that way. Look, if you were gonna go to a doctor and you got opinion from her, would you then go talk to all your buddies and see what they think about what she said? Come on, dude. Okay, well, look, um, so my computer is still down, and so like, what other questions do you have? Because I really need to get back to work here. Okay, okay, well, for one, there's this question of EDR that's on here. Wait, EDR? What? I think you take a pill for that, man. I mean, EDR, it's like, it's super important. It's like an endpoint security platform. What it does is it looks into the endpoint itself and it looks at the behavior analytics and does some— um, uh, what? Yeah, for sure. No doubt. No doubt. No doubt. Yep. Hey, look, man, I'm just trying to help you out here. You're the one that asked for this. Yeah, yeah, look, I get it. It's— but it's just, it's my computer and I'm kind of dead in the water right now, you know what I mean? Like, you do realize that if we don't get this cyber insurance stuff figured out, you're gonna have some pretty significant risk. Yeah, yeah, sure, so definitely, so like, why don't we do this? Why don't like you put in whatever you think needs to be on the questionnaire, and I think we're good, and then you can get back to my computer and fix that so I can get back to work, yeah? Uh, dude, that's illegal. I need you to know that. Like, I need to know that you understand that that's illegal. Ah, okay, like look, man, fine, I'll buy whatever it is you say we need to buy, like the ED computer pills that you think I need, all that stuff, just get Get it done. Okay, I approve it all. So can we get back to my computer now, please? Alright, thank you. Was that so hard? Okay, now what's going on with your computer? Tell me what's happening here. Oh yeah, um, so like, shouldn't be a big deal or anything, but like, I came in today and I noticed that like my files seem to be gone and there's this red skull and crossbones that seems to be there.










