{"id":3204,"date":"2021-11-05T06:41:05","date_gmt":"2021-11-05T11:41:05","guid":{"rendered":"https:\/\/lg-staging.lougcloud.com\/?p=3204"},"modified":"2025-07-24T14:04:59","modified_gmt":"2025-07-24T19:04:59","slug":"2021-cisa-insights-report","status":"publish","type":"post","link":"https:\/\/lg-staging.lougcloud.com\/?p=3204","title":{"rendered":"2021 CISA Insights Report"},"content":{"rendered":"\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-85bp3-f856194ef33e7bc72ec0d3bf98278fce\">\n.flex_column.av-85bp3-f856194ef33e7bc72ec0d3bf98278fce{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  class='flex_column av-85bp3-f856194ef33e7bc72ec0d3bf98278fce av_one_full  avia-builder-el-0  avia-builder-el-no-sibling  first flex_column_div av-zero-column-padding  '     ><p><br \/>\n<section  class='av_textblock_section av-k0pon615-114d01afa1a8988881100bbf49ddc8fc '  ><div class='avia_textblock' ><h1>CISA Insights Report: Risk Considerations For MSP Customers<\/h1>\n<\/div><\/section><br \/>\n<section  class='av_textblock_section av-k0pop9td-bbcbe599b29853166e54fa81e9bef78a '  ><div class='avia_textblock' ><h2>Summary<\/h2>\n<p>In September 2021, the <a href=\"https:\/\/www.cisa.gov\/nrmc\" target=\"_blank\" rel=\"noopener\">National Risk Management Center (NRMC)<\/a> at the <a href=\"https:\/\/www.dhs.gov\/\" target=\"_blank\" rel=\"noopener\">U.S. Department of Homeland Security\u2019s (DHS) Cybersecurity and Infrastructure Security Agency (CISA)<\/a> published <a href=\"https:\/\/www.cisa.gov\/sites\/default\/files\/publications\/cisa-insights_risk-considerations-for-msp-customers_508.pdf\" target=\"_blank\" rel=\"noopener\">a risk considerations report<\/a> for Managed Service Providers (MSPs) and MSP customers.<\/p>\n<p>MSPs offer customers technical services that can reduce costs and play a critical role supporting efficient IT operations for organizations of all sizes. Outsourcing IT services does not absolve an organization from risk management responsibilities. MSP efforts to assist customers may introduce unanticipated risks. MSP customers must weigh risks, proactively manage cybersecurity threats and collaborate with their MSPs to jointly reduce vulnerabilities.<\/p>\n<h2>OVERVIEW<\/h2>\n<p>MSPs offer customers technical services that can reduce costs and play a critical role supporting efficient IT operations for organizations of all sizes. Outsourcing IT services does not absolve an organization from risk management responsibilities. MSP efforts to assist customers may introduce unanticipated risks. MSP customers must weigh risks, proactively manage cybersecurity threats and collaborate with their MSPs to jointly reduce vulnerabilities.<\/p>\n<h2>SELECT HIGHLIGHTS<\/h2>\n<p>The <a href=\"https:\/\/www.cisa.gov\/sites\/default\/files\/publications\/cisa-insights_risk-considerations-for-msp-customers_508.pdf\" target=\"_blank\" rel=\"noopener\">CISA Insights Report<\/a> published multiple recommendations for MSP customers, including:<\/p>\n<ul>\n<li>MSP customers must balance cost effectiveness and efficiency with reliability and security when considering whether to outsource IT services.<\/li>\n<li>MSP customers must understand the risks from potential loss of core organizational systems and services, loss of confidentiality, integrity and availability of data, loss of consumer and market confidence, loss of productivity due to operational disruption and other adverse financial impacts.<\/li>\n<li>To minimize disruptions, an MSP customer should define technical roles and responsibilities within its MSP vendor agreement and apply the <a href=\"https:\/\/aws.amazon.com\/compliance\/shared-responsibility-model\/\" target=\"_blank\" rel=\"noopener\">Shared Responsibility Model<\/a> and the Principal of Least Privilege.<\/li>\n<li>MSP customers should develop and maintain cybersecurity risk management plans that list critical organizational assets, prioritizes these assets\u2018 protection and defines shared responsibilities, among other actions. CISA\u2019s <a href=\"https:\/\/www.cisa.gov\/sites\/default\/files\/publications\/Cyber%20Essentials%20Starter%20Kit_03.12.2021_508_0.pdf\" target=\"_blank\" rel=\"noopener\">Cyber Essentials resources<\/a> can help.<\/li>\n<li>Coordinating procurement, operations, continuity and security requirements with MSPs helps MSP customers decrease <a href=\"https:\/\/www.cisa.gov\/sites\/default\/files\/publications\/defending_against_software_supply_chain_attacks_508_1.pdf\" target=\"_blank\" rel=\"noopener\">supply chain risk<\/a> and improve system performance.<\/li>\n<li>MSP contracts should clearly articulate requirements and responsibilities, including detailed guidelines for incident management, common operational procedures and transition (onboarding) plans.<\/li>\n<li>An MSP customer should identify specific personnel responsible for monitoring and managing the MSP\u2019s day-to-day activities.<\/li>\n<\/ul>\n<p><em>The purpose of this one-page document is to generate awareness of the <\/em><a href=\"https:\/\/www.cisa.gov\/sites\/default\/files\/publications\/cisa-insights_risk-considerations-for-msp-customers_508.pdf\" target=\"_blank\" rel=\"noopener\"><strong><em>CISA Insights Report<\/em><\/strong><\/a><em> and should not be interpreted as a summary of the official government information presented therein.<\/em><\/p>\n<\/div><\/section><\/p><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":3,"featured_media":3216,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[51,52],"class_list":["post-3204","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity-news","tag-reports","tag-security-info"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>2021 CISA Insights Report - Louisville Geek<\/title>\n<meta name=\"description\" content=\"Learn key risk management insights from CISA&#039;s report for MSP customers, focusing on balancing cost, security, and collaboration to reduce vulnerabilities and manage cybersecurity threats.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"2021 CISA Insights Report - Louisville Geek\" \/>\n<meta property=\"og:description\" content=\"Learn key risk management insights from CISA&#039;s report for MSP customers, focusing on balancing cost, security, and collaboration to reduce vulnerabilities and manage cybersecurity threats.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/lg-staging.lougcloud.com\/?p=3204\" \/>\n<meta property=\"og:site_name\" content=\"Louisville Geek\" \/>\n<meta property=\"article:published_time\" content=\"2021-11-05T11:41:05+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-24T19:04:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2021\/11\/shutterstock_2010923726.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"678\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Ben Lawrence\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Lawrence\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"2021 CISA Insights Report - Louisville Geek","description":"Learn key risk management insights from CISA's report for MSP customers, focusing on balancing cost, security, and collaboration to reduce vulnerabilities and manage cybersecurity threats.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"2021 CISA Insights Report - Louisville Geek","og_description":"Learn key risk management insights from CISA's report for MSP customers, focusing on balancing cost, security, and collaboration to reduce vulnerabilities and manage cybersecurity threats.","og_url":"https:\/\/lg-staging.lougcloud.com\/?p=3204","og_site_name":"Louisville Geek","article_published_time":"2021-11-05T11:41:05+00:00","article_modified_time":"2025-07-24T19:04:59+00:00","og_image":[{"width":1200,"height":678,"url":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2021\/11\/shutterstock_2010923726.png","type":"image\/png"}],"author":"Ben Lawrence","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Ben Lawrence","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/lg-staging.lougcloud.com\/?p=3204#article","isPartOf":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=3204"},"author":{"name":"Ben Lawrence","@id":"https:\/\/lg-staging.lougcloud.com\/#\/schema\/person\/1e8874ec46062e6e46fbbba43fc82d56"},"headline":"2021 CISA Insights Report","datePublished":"2021-11-05T11:41:05+00:00","dateModified":"2025-07-24T19:04:59+00:00","mainEntityOfPage":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=3204"},"wordCount":608,"publisher":{"@id":"https:\/\/lg-staging.lougcloud.com\/#organization"},"image":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=3204#primaryimage"},"thumbnailUrl":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2021\/11\/shutterstock_2010923726.png","keywords":["reports","security info"],"articleSection":["Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/lg-staging.lougcloud.com\/?p=3204","url":"https:\/\/lg-staging.lougcloud.com\/?p=3204","name":"2021 CISA Insights Report - Louisville Geek","isPartOf":{"@id":"https:\/\/lg-staging.lougcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=3204#primaryimage"},"image":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=3204#primaryimage"},"thumbnailUrl":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2021\/11\/shutterstock_2010923726.png","datePublished":"2021-11-05T11:41:05+00:00","dateModified":"2025-07-24T19:04:59+00:00","description":"Learn key risk management insights from CISA's report for MSP customers, focusing on balancing cost, security, and collaboration to reduce vulnerabilities and manage cybersecurity threats.","breadcrumb":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=3204#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/lg-staging.lougcloud.com\/?p=3204"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/lg-staging.lougcloud.com\/?p=3204#primaryimage","url":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2021\/11\/shutterstock_2010923726.png","contentUrl":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2021\/11\/shutterstock_2010923726.png","width":1200,"height":678},{"@type":"BreadcrumbList","@id":"https:\/\/lg-staging.lougcloud.com\/?p=3204#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/lg-staging.lougcloud.com\/"},{"@type":"ListItem","position":2,"name":"2021 CISA Insights Report"}]},{"@type":"WebSite","@id":"https:\/\/lg-staging.lougcloud.com\/#website","url":"https:\/\/lg-staging.lougcloud.com\/","name":"Louisville Geek","description":"Empowering Local Businesses and National Enterprises with Comprehensive IT Services","publisher":{"@id":"https:\/\/lg-staging.lougcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/lg-staging.lougcloud.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/lg-staging.lougcloud.com\/#organization","name":"Louisville Geek","url":"https:\/\/lg-staging.lougcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/lg-staging.lougcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2019\/10\/lougeek_full_logo-black-1.png","contentUrl":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2019\/10\/lougeek_full_logo-black-1.png","width":1671,"height":506,"caption":"Louisville Geek"},"image":{"@id":"https:\/\/lg-staging.lougcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/lg-staging.lougcloud.com\/#\/schema\/person\/1e8874ec46062e6e46fbbba43fc82d56","name":"Ben Lawrence","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/82e4d3ae8ca51a80f9e1c400a5a63cd408dddc6d07c994878451703381610b2e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/82e4d3ae8ca51a80f9e1c400a5a63cd408dddc6d07c994878451703381610b2e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/82e4d3ae8ca51a80f9e1c400a5a63cd408dddc6d07c994878451703381610b2e?s=96&d=mm&r=g","caption":"Ben Lawrence"},"description":"Managing Partner at Louisville Geek, an IT services company supporting small and medium-sized businesses. Since joining in 2009, he has helped grow the company while leading its marketing efforts. Based in Louisville, Kentucky, Ben brings more than 15 years of experience in technology services and business leadership. View Ben's LinkedIn","url":"https:\/\/lg-staging.lougcloud.com\/?author=3"}]}},"_links":{"self":[{"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/posts\/3204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3204"}],"version-history":[{"count":9,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/posts\/3204\/revisions"}],"predecessor-version":[{"id":6885,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/posts\/3204\/revisions\/6885"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/media\/3216"}],"wp:attachment":[{"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}