Is it better to be cyber secure or cyber resilient?

Is it better to be cyber secure or cyber resilient? If you think this is a trick question, it isn't. There are many who believe that security is solely a matter of defense. While defensive measure are crucial to any MSP (or their customers), preparing for eventual attacks which are successful, is also crucial.   So, what is an MSP to do? Here are some simple measures every MSP ought to be doing right now to be both prepared for cyber-attacks, but also resilient to them if they are successful. PlanningDocumenting your plans Identifying where your risks are Anticipating those attacks, and eventual breaches TestingTest means test Test, and often Document your test results. Learn from them MonitoringKeeping a watchful eye on your internal MSP network and IT assets RMM isn't enough   More Fake MSPs I no longer trust websites. When you hear this story you may not either. While this story is completely true, it is also, regrettably, a reality we must face as a profession and fix!   Urgent News for Break/Fix Providers Three decades since the first MSPs were created, we still have IT organizations who are in doubt as to the business model around managed services. If these non-MSPs can't be persuaded based on the logic of the business model alone, perhaps we can present a very real economic motive for getting rid of your break/fix and reactive customers. Remember, no matter how much your client's try and make you think that reactive IT services are the best for them, they are wrong!