ChannelBuzz.ca

ChannelBuzz.ca
  • 0.0 (0)
  • TECH NEWS
  • UPDATED DAILY

Cutting through the noise for Canadian VARs and MSPs

  1. Your tools are the threat: ESET’s Tony Anscombe on MSP supply chain risk

    6H AGO

    Your tools are the threat: ESET’s Tony Anscombe on MSP supply chain risk

    The Huntress 2026 Cyber Threat Report found a 277% year-over-year surge in the abuse of RMM tools, which now account for roughly a quarter of all observed incidents. The ConnectWise 2026 MSP Threat Report frames 2025 as the year of “the abuse of trust,” with attackers increasingly exploiting valid credentials, misconfigured remote access, and trusted software updates rather than relying on novel exploits. For MSPs, the implication is uncomfortable: the tools you use to manage and protect your clients are increasingly being turned against you and them. Tony Anscombe, Chief Security Evangelist at ESET, returns to the podcast to dig into how these attacks actually work – from daisy-chaining multiple CVEs for entry, escalation, and persistence, to ClickFix-style social engineering where users are tricked into pasting malicious PowerShell commands through fake browser prompts. The conversation also gets into why attackers are going after MSP toolchains specifically, the patching dilemma MSPs face when every hour of delay is an hour of exposure, and why groups like Akira are now targeting backup infrastructure first to neutralize the recovery path before encrypting. On the business side, Tony is candid about what a breach through your own tools means for trust, reputation, and survival – and offers practical starting points: audit your environment, clean up stale credentials, patch on cadence, and run tabletop exercises with your customers, not just internally. He also introduces the concept of cyber warranties as a potential competitive differentiator for MSPs looking to stand out on RFPs. This is the second in an ongoing series of conversations with Tony. The first, covering the cybersecurity trends MSPs can’t ignore in 2026, is also available. Read Full Transcript TRANSCRIPT TO COME

    37 min
  2. Communications 101: Gareth Pettigrew on why PR has never mattered more for MSPs

    1D AGO

    Communications 101: Gareth Pettigrew on why PR has never mattered more for MSPs

    Gareth Pettigrew, founder of Pettigrew Communications I’ve thought about doing an episode like this for a while, but I kept bumping into the same problem: the “so what” question. Why should a 15-person MSP owner, already wearing six hats, care about communications? Gareth Pettigrew cracked that code in about 30 seconds. As the industry moves from search to chat, non-paid citations and earned media are proving to be critical to how large language models answer queries and surface companies. If you’re not showing up in that landscape, you’re increasingly invisible in ways that didn’t exist two years ago. Gartner is projecting PR budgets to double over the next year. The ground has shifted. Gareth spent years leading partner communications for Cisco and Okta, and what always stood out to me is that he genuinely understands the partner business – not just the vendor talking points. He’s now launched his own consultancy, Pettigrew Communications, offering fractional senior comms leadership and project-based consulting for companies across the channel. In this conversation, we dig into why PR isn’t what most partners think it is anymore – it’s not press releases and pitching journalists. The media landscape has changed dramatically with AI, and the real opportunity for small partners is in thought leadership, LinkedIn engagement, and building an externally wired narrative that positions you as a trusted voice in your niche. Gareth offers a three-week roadmap: week one, listen to the industry conversations and identify one or two niches you can credibly insert yourself into. Week two, build your story – one page, three to five core messages. Week three, identify ten influencers to follow. Then activate on LinkedIn by commenting meaningfully for a month before posting your own perspectives. We also talk about common mistakes – like treating PR as a marketing tactic or relying on internally oriented messaging – and what success actually looks like when you’re starting from zero. This is the first in a planned series. Future episodes will go deeper into messaging, LinkedIn best practices, crisis communications, and more. Read Full Transcript Robert Dutt: Hello and welcome to In The Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel community for the last sixteen years. I’m Robert Dutt, editor of ChannelBuzz.ca, and your host for the show. My guest today is Gareth Pettigrew. Gareth spent years leading partner communications at Cisco and most recently at Okta, and he’s now launched his own consultancy, Pettigrew Communications, offering fractional comms leadership to companies across the channel. I’ve known Gareth for a long time, and what’s always stood out to me is that he genuinely understands the partner business – not just the vendor talking points, but how partners actually operate and communicate day to day. I’ve wanted to do an episode on communications and PR for partners for a while now, but I kept bumping into the same problem: I couldn’t crack the “why should a 15-person MSP care about this” question in a way I thought would actually land. And then I talked to Gareth, and he cracked it in about 30 seconds. We’re going to get into why communications matters more right now than it ever has, why it doesn’t have to be the heavy lift you think it is, and Gareth’s going to give you a practical, week-by-week roadmap for getting started – even if you have zero budget and zero comms experience. This is also the first in what we’re planning as a series. Gareth and I are going to go deeper on specific threads in future episodes – things like crisis communications, LinkedIn thought leadership, working with your vendor’s PR team – so think of this one as the foundation. Let’s get right into it, my chat with Gareth Pettigrew. Robert Dutt: Gareth, thanks for taking the time. I appreciate you joining us. Gareth Pettigrew: Glad to be here, Rob. Robert Dutt: I thought of you to have this conversation because we’ve sat down at many conferences and with many vendor execs when you were running comms around the world, one might say. You know, channel leaders from Cisco and even after you’d moved off the partner beat specifically, I think you always did a really good job of, when talking to us on the channel side, framing up the partner side of the conversation in a way that leads me to believe that you’ve got a pretty good grip on what a lot of these guys are doing, which I think is really important for this conversation. This is something that I’ve thought about doing for a while, doing an episode like this, but I kept bumping into the same problem. Basically the “so what” problem. Why should I care about communications as a 15-person MSP owner? Then when we did our pre-call to discuss the possibility of doing this and where it could go, you kind of cracked that code in about 30 seconds. So let me put it right to you. For that 15-person MSP kind of partner who’s listening to this, they’re busy, they’re wearing six hats. They own marketing. They oversee sales. They probably do HR. They have a business to run. Why should communications be on their radar right now, and what’s changed that makes that even more urgent than you would have said a few years ago? Gareth Pettigrew: Fundamentally, in a word, like almost everything right now, it’s around AI. And perhaps not intuitively, it appears that PR is emerging as one of the big winners of AI. Maybe not for the reasons you think, though. Number one is that non-paid citations, and specifically earned media, are proving to be incredibly important in terms of the LLMs answering their questions. So as the industry shifts from search to chat, we’re seeing PR be much more important in terms of that overall mix. The second thing, and this will resonate with a lot of people, is the amount of AI slop that’s out there. And Rob, as a journalist, I see you laughing. What we see is a lot of content being created, but it’s all generic crap. It’s all the same. What happens is that damages trust, damages customers’ belief in executives, in companies. So increasingly we’re seeing companies, and especially it’s happening a lot at the higher end of the market, executives are really investing in human communicators to help them break through the slop and stand out. So that’s the real reason for why now. I will say though, Rob, I think at the end of the day for PR, you need two ingredients. You need a story and you need a storyteller. And one of the things, why I’ve always been partner-focused, it wasn’t just because I liked the channel. It was self-interested as well, in that I found some of the best storytellers in the industry weren’t the vendor executives, they were the partner executives. So I’ve always been stunned that more partners don’t lean quite heavily into comms as a real big part of their new biz and their marketing mix. A lot of them are really well positioned to raise their awareness through communications. Robert Dutt: So tell me a bit about that. I’m curious what you’ve seen. What sets apart those partners who you’ve sat there and thought, “You know what, you could be doing my exact role here and telling this story.” What is it, and particularly what separates those who do it really well and those who just kind of either go through the motions or leave it on the table, as it were? Gareth Pettigrew: And let’s be clear, everyone isn’t a great storyteller. But what I’ve seen is that in the partner communities, we’re rife with the type of personalities that make for great storytellers. A lot of those people with entrepreneurial spirit who are very proactive sellers, they spend their day not talking to engineers and vendors and all of that stuff, but they spend their day talking to customers. So they know what’s top of mind for their customer. Often with vendor executives, that’s one of the biggest challenges. It’s pivoting from that internal orientation to an external orientation. And a lot of partners are already there. So I’ve really seen some come across consistently. I’ve seen partner executives be on the level with my top executives at the vendor, or even better. So they’re in a great place. Robert Dutt: So for the partner who’s hearing this and thinking, “Okay, I get it. That’s cool. I can tell my story and I understand the customer’s viewpoint, so I should be able to put it in their words and their thoughts. But I don’t have the budget and I definitely don’t have a comms person, nor is that on my roadmap of my next few hires.” I think a lot of people still picture PR as press releases and pitching journalists, and that feels like a lot of work. How would you position what communications actually looks like today for a company at that kind of 15-person size? Gareth Pettigrew: I think the biggest blocker to companies getting involved in PR is they’ve got a legacy idea of what PR is. PR equals press release. That’s 15, 20 years ago. The reality is, especially over the past year and now with AI, we’ve seen the media landscape change absolutely dramatically. The media business model has been disaggregated with Google and others blowing up the advertising business model. And we’ve seen a decrease in some ways in terms of the number of journalists that we have out there. But an increase in some other mediums – things such as podcasts, things such as Substack. We see much more new media, much more niche media. And that’s in the traditional, what we call the earned space. We’ve also seen the social media rise. We’ve seen the advent of owned media, be that executives taking a thought leadership stance on LinkedIn or X as it may be, or in terms of their newsrooms. A lot of vendors do this. They turn their newsrooms into actual content destinations to get t

    27 min
  3. Okta’s Canadian bet: Data cell, 600 employees, and a plan to triple the business

    2D AGO

    Okta’s Canadian bet: Data cell, 600 employees, and a plan to triple the business

    Ryan Sydor, head of Okta Canada When a global SaaS vendor says it’s investing in a national market, what does that actually look like? In this episode, we put that question to Ryan Sydor, Okta’s Area Vice President and Country Manager for Canada. Okta has been making some significant moves north of the border. The company now has over 600 employees in Canada, including an engineering hub in Toronto – not just a sales branch. It recently launched a Canadian data cell based in Montreal with a Calgary failsafe, designed to keep customer identity data in-country and open the door to regulated sectors like government, financial services, and healthcare that previously couldn’t deploy Okta due to data residency requirements. French language support is also part of the rollout, with an eye on Quebec’s public sector. On the channel side, Sydor says Okta is now running over 80 percent of its Canadian revenue through partners, up from roughly 70 percent a few years ago. The company has been bringing select Canadian partners to its internal sales kickoff to train alongside Okta’s own sellers – a tangible sign of how central partners are to the go-to-market here. Sydor’s stated ambition is to triple Okta’s Canadian business within two years, backed by the infrastructure and headcount to support it. This conversation pairs well with our recent interview with Okta VP of Product Jack Hirsch on shadow AI and non-human identity – the global product story alongside the Canadian market story. Read Full Transcript Robert Dutt: Hello and welcome to In The Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel community for the last 16 years. I’m Robert Dutt, editor of ChannelBuzz.ca, and your host for the show. Here’s a question I think about a lot. What does it actually mean when a global tech vendor says they’re investing in Canada? Because there’s a spectrum, right? On one end, you’ve got a vendor that sells into Canada from a US office, maybe sends someone up to a conference once a year. On the other end, you’ve got real infrastructure, real headcount, real commitment to treating Canada as a market with its own needs and its own opportunities. Somewhere in the middle is where most vendors actually land. Today I’m talking to Ryan Sydor, the head of Okta Canada. Okta’s been making some pretty significant moves here over the past year or so. They launched a Canadian data cell, they’ve redesigned their Toronto office, and they’ve now got over 600 employees in the country. If you caught our recent conversation with Okta’s Jack Hirsch about shadow AI and non-human identity, think of this as the companion piece. That was the global product story. This is the Canadian market story – what Okta’s building here and what it means for partners. Let’s get into it. My chat with Ryan Sydor. Robert Dutt: Ryan, thanks for taking the time. Ryan Sydor: Good to see you again, Robert. Robert Dutt: You’re in this role heading Canada at a pivotal moment. New office, new data cell in Canada, new channel chief on the global level. When you look at the Canadian market for identity, what’s the picture that you walked into and what’s the mandate that you’ve been given for the Canadian organization? Ryan Sydor: Well, the market obviously has changed, and there’s been a focus in the last six months that has been dominating every conversation. It’s AI. Every conversation we have with a customer or prospect is around AI. There’s a curiosity around it, there’s an urgency, there is uncertainty. Everyone’s trying to figure out how do we use AI to improve our business and at the same time, protect our business and ensure that we’re safe. It’s this balance of the need for cybersecurity, the need to protect your organization. Cybersecurity attacks have increased 200 percent year over year, and it was on a high baseline as it was. Customers are really focused on how do we stay safe and keep our company and our brand safe. At the same time, AI has changed the way we think about running a business in ways I’m not sure companies fully understand yet. How do we leverage innovation to stay ahead of our competition? The opportunity where you can vault ahead, you can really differentiate, create new business streams, create new efficiencies, and do it at the same time that you’re secure. The mandate that we have is not just a Canadian mandate. The mandate is how do we help our customers along that journey, and how do we do it quickly? Because this is all happening fast. It’s an unpaved road in some respects. No one really knows exactly how it’s going to play out, but we understand the value and the benefit and the risks that come with it. We feel at Okta that we’re really well positioned to help our customers, partner with them, and help keep them safe while still allowing them to be innovative. From a Canadian perspective, our goal is how do we partner with our customers and with Canadian businesses, help paint that picture, sit with them on the same side of the table, and put together our plans so that they can innovate and be safe. And from a channel partner perspective, one of the major pillars that we have as an organization this year is to partner. We’re focused on AI, we’re focused on a better methodology of how we approach our customers, and then it’s about being a partner-first organization. What I’ve seen with our new SVP is a stronger alignment with our partners, making sure that these conversations that we’re having, we’re having together. A lot of this is about relationships, it’s about comfort, it’s about trust, and who better to work with than our partner network. Robert Dutt: Sticking with the theme of the Canadian investment, when Okta looks at Canada as a market, are we at the “we need a flag planted here” level, or is there something structurally different about the Canadian opportunity that’s driving the investment at this point? Ryan Sydor: I think it is AI, and it’s our need to partner with organizations. I think it’s also the opportunity that Okta sees. When we invest in the data cell, it opens up the market to companies that we haven’t been able to sell to in the past. The regulated industries, local governments, provincial governments, federal governments. That presents a great opportunity for us as an organization, and it’s a need for these different levels of government. There are regulations that have come out, C-8 and the need to be more focused on cybersecurity. We as the trusted identity company are a good fit at this time with those organizations. Robert Dutt: You touched on the data cell that went live this quarter. For partners and customers who aren’t themselves deep in the identity space, can you explain what that actually is and what it means in practice? What changes for a customer on day one of being on the Canadian cell versus where they were before? Ryan Sydor: It means the data is hosted in Canada. The data cell is in Montreal. We have a failsafe in Calgary. So it means that those companies that need to have their data in Canada, managed by Canadians, now have the opportunity to do so. Robert Dutt: You touched on how that unlocks government and other areas. Can you explain what are the verticals and what types of deals weren’t on the table before but are now? Ryan Sydor: There’s two kinds. First of all, there’s the federal government. There were RFPs that came through that we couldn’t even bid on, because without data residency, you’re not eligible to bid. So it does open up that opportunity. Then there are companies who are making decisions on where they want their data. It’s a decision around regulation, but also it’s a costing question. It’s about what their customers are comfortable with. There have been customers in the past who have asked to be on the EU cell or have chosen to go with other options. Now they have the opportunity to work with Okta with our workforce product and have their data hosted in Canada. Robert Dutt: A few years ago, you were running about 70% of Canadian revenue through partners with a pretty small direct team. Is that still the ratio today, or how has that shifted? Ryan Sydor: The number has increased. I think that number is over 80% from last year. Our direct team has grown a little bit, but the partnership is meant to help really scale the business. I’ll give you an example of how we’ve prioritized partners to help us grow. We actually invested to have partners join us at our sales kickoff this year, where we went through a new sales methodology, and we wanted our partners to be with us so that we could sell together. It wasn’t all our partners, it was a select group of partners. But it was the company demonstrating that as a partner-first organization, we’re now eliminating the silos. We understand the same language, we think about the business the same way, and we think that’s going to be beneficial to our partners, to our customers, and obviously to Okta as well. Robert Dutt: Expanding on that, with Laura Padilla coming in as channel chief globally, she’s talked about doubling down on partners in every geography and driving more toward partner-led markets. From what you’re saying, it sounds like Canada is firmly in that space. What does that mean practically for an MSP or a VAR who’s working with you or potentially working with you? Ryan Sydor: What I hope it means is, one, as we continue to focus on being partner-first, it means that we should be speaking earlier. That’s the first thing we’re trying to do, make sure we’re aligned earlier. We’re investing in programs and processes to make sure that we’re talking to our VARs, that we understand who the relationships are, and make sure we leverage them. And doing that on a consistent basis where we build trust not only with the custome

    17 min
  4. ICYMI: SonicWall names the seven deadly sins, Cisco pulls deal reg, and Lenovo bets on services

    2D AGO

    ICYMI: SonicWall names the seven deadly sins, Cisco pulls deal reg, and Lenovo bets on services

    Four stories shaping the Canadian IT channel heading into the second week of April. SonicWall’s seven deadly sins SonicWall released its 2026 Cyber Protect Report, reframing SMB security around seven predictable failures: ignoring fundamentals, false confidence, overexposed access, reactive posture, cost-driven deferral, legacy access models, and chasing hype over execution. Key data: 88% of SMB breaches involve ransomware — more than double the enterprise rate. Identity, cloud, and credential compromise account for 85% of actionable security alerts. The average breach goes undetected for 181 days. More on this topic coming in an upcoming In The Channel episode with SonicWall’s Michael Crean. Cisco pulls compute deal registration Cisco eliminated compute deal registration effective immediately, cancelling associated promotional discountsamid rising memory costs. Partners are calling the move out of character, warning of direct margin impact. The latest development in the ongoing hardware cost squeeze affecting vendors across the board. Lenovo 360 bets on services Lenovo updated the Lenovo 360 partner framework with simplified tiers and a new Lenovo 360 for Services pathway launching April 13th, plus a new Tech Connect technical community. ChannelDive frames it plainly: Lenovo is boosting the partner program as a PC sales slowdown looms. The services pivot is the hedge. Canadian cybersecurity data CDW Canada and IDC Canada released the 2026 Canadian Cybersecurity Study based on 700+ Canadian security leaders. Cyberattacks on Canadian enterprises surged nearly 80% year-over-year; enterprise cloud infection rates hit a record 53%. The full study is available at CDW Canada. The report’s “maturity paradox” framing — security investment rising, breach success rising with it — echoes findings from Auvik and OpenText covered in last week’s episode. Read Full Transcript Hello and welcome to In Case You Missed It from ChannelBuzz.ca. I’m Robert Dutt, editor of ChannelBuzz.ca, and this is your weekly look at the stories that matter for the Canadian IT channel community. April 6th, 2026. Four stories this week. SonicWall reframes what security actually means for SMBs. Cisco hits partners in the deal reg. Lenovo bets on services. And some sobering Canadian numbers on the state of cybersecurity. Let’s get into it. SonicWall released its 2026 Cyber Protect Report this week, and the headline is a reframe worth understanding: most SMBs aren’t losing ground to sophisticated attacks. They’re losing ground to seven predictable, preventable failures that SonicWall has named the Seven Deadly Sins of Cybersecurity. Those seven sins: ignoring the fundamentals like authentication and patching; operating with false confidence about your risk level; overexposed access with flat networks and implicit trust; a reactive security posture rather than proactive monitoring; cost-driven security decisions that defer investment until after a breach arrives; reliance on legacy access models like VPNs that authenticate once and trust everything thereafter; and chasing hype over execution — buying tools without actually deploying them properly. The supporting data is striking. SMBs see ransomware involvement in 88% of their breaches, more than double the rate at large enterprises. Identity, cloud, and credential compromise account for 85% of actionable security alerts. The average breach goes undetected for 181 days. The stolen password, not the zero-day, is the attacker’s weapon of choice. The quote from Michael Crean, their vice president of Managed Services,  captures it best: “The danger isn’t that AI isn’t working; it’s that we’re using it as an excuse not to do the things we already know we should.” We’ll go deeper on this with Crean in an upcoming In The Channel episode. Watch for that in the coming weeks. Now for something that hits closer to home — specifically, closer to the margin line. Cisco has eliminated compute deal registration, effective immediately. No more deal reg on compute products, no more associated promotional discounts. The driver, per Cisco, is rising memory costs — the same hardware squeeze we’ve been tracking for weeks. Channel reaction has been blunt. Partners are calling the move out of character for Cisco and warning of lost margins. CRN’s coverage makes clear this is not a minor adjustment — it’s a structural change to how Cisco compute goes to market through the channel. This is the latest domino in the RAMmageddon effect. Memory prices surge, vendors absorb what they can, and eventually the cost lands on partners and customers. Intel and AMD both raised prices last week. Cisco just removed the cushion that was softening the impact for partners. Lenovo’s answer to the same hardware headwind looks quite different. They’ve announced updates to the Lenovo 360 partner framework, with the headline being a new Lenovo 360 for Services pathway launching April 13th. The pitch is straightforward: structured resources and incentives to move partners from transactional hardware deals toward managed and professional services. Given everything we just said about margin compression, that direction makes sense. New additions include a Lenovo 360 Tech Connect technical community and an upgraded partner portal. Not flashy, but this is exactly the kind of structural investment that matters when hardware economics are working against you. ChannelDive’s framing is the honest one: Lenovo is boosting its partner program as a PC sales slowdown looms. If you can’t win on hardware margin right now, services is where the conversation needs to go. We’ll close with some Canadian numbers worth paying attention to. CDW Canada, working with IDC Canada, surveyed more than 700 Canadian security leaders for the 2026 Canadian Cybersecurity Study released this week. The headline: cyberattacks targeting Canadian enterprises surged nearly 80% year-over-year. Enterprise cloud infection rates hit a record high of 53%, up from 41% the prior year. The report calls this a maturity paradox — organizations are investing in security architecture, but breach success rates are climbing anyway. It’s Canadian-specific data, which makes it more immediately applicable than most global threat reports for conversations with clients here at home. That’s your In Case You Missed It for April 6th, 2026. Links to everything we covered are in the show notes at ChannelBuzz.ca. If you’re finding this useful, subscribe on Apple Podcasts, Spotify, YouTube, or wherever you listen. Ratings and reviews always help. I’m Robert Dutt for ChannelBuzz.ca. Have a great week, and I’ll see you in the channel.

    5 min
  5. Fortra: building a channel platform from 20-plus acquisitions

    6D AGO

    Fortra: building a channel platform from 20-plus acquisitions

    Faraz Siraj, vice president of global channels and alliances at Fortra Faraz Siraj, vice president of global channels and alliances at Fortra, joins the podcast to talk about what it looks like to build a channel program around a cybersecurity platform assembled through more than 20 acquisitions – and why MSPs should be paying attention now. Fortra’s portfolio spans offensive security tools like Cobalt Strike and Core Impact, data protection through Digital Guardian, and security awareness training via Terra Nova Security. It’s a wide footprint, and as Faraz acknowledges, many partners still know the acquired brands without realizing they’re all under one roof. The Fortra Protect partner program, launched in 2025 with guaranteed margins and a single FortraOne partner agreement, is the company’s answer to the fragmented discount structures and multiple contracts that came with all that M&A. The conversation also digs into Fortra’s recent decision to sell its Alert Logic managed detection and response services to LevelBlue – a deliberate move to position the company as a software provider, not a services competitor to its own partners. Faraz is candid about where offensive security capabilities realistically fit into an MSP’s stack and where they don’t, and offers a practical on-ramp for Canadian partners through Fortra’s acquisitions of Ottawa-based Titus and Montreal-based Terra Nova. Read Full Transcript Robert Dutt: Hello and welcome to In The Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel community for the last 16 years. I’m Robert Dutt, editor of ChannelBuzz.ca and your host for the show. If I say the name Fortra, there’s a decent chance you might not immediately place it. But if I say Cobalt Strike, or Digital Guardian, or Alert Logic, or Titus, especially if you’re in Ottawa, those might ring a bell. Fortra is the company that’s been quietly acquiring cybersecurity companies for the better part of a decade. More than 20 acquisitions in all, and now they’re trying to stitch it all together into a unified platform, pointed squarely at MSPs and MSSPs. What makes this story interesting right now is they’ve recently made some moves that signal where they think they fit into the ecosystem. They sold off their Alert Logic managed services business to LevelBlue, which is a pretty clear statement. We make software, we’re not going to compete with you on service delivery. And they’ve rolled out a new partner program called Fortra Protect with guaranteed margins and a single partner agreement that covers the whole portfolio. My guest today is Faraz Siraj, Fortra’s Vice President of Global Channels and Alliances, and I wanted to talk to you about what it looks like to build a channel program around a platform that was assembled through acquisition, how MSPs should think about the balance between offensive and defensive security capabilities, and whether there’s a Canadian go-to-market story here. Let’s get right into it. My chat with Faraz Siraj. Faraz, thanks for taking the time. I appreciate it. Faraz Siraj: Great to be here. Robert Dutt: Fortra has been built through a bunch of acquisitions. 20+, 25+ I think? For MSPs who know Cobalt Strike or Digital Guardian but don’t necessarily know the umbrella brand of Fortra, what’s the pitch for why they should think of you guys as a platform rather than sort of a collection of tools? Faraz Siraj: Great question. Well, all of these products that we acquired over a, I’d say, a five-year period, it was around a little over 20 companies, we are going to platformization, and all of these will be available via the platform. And the platform provides a variety of tools to manage, and so MSPs would probably want to welcome that opportunity to utilize a single platform with multi-tenancy to help manage those solutions for their customers. It’s just a natural fit, and rather than having multi-screens, multiple interfaces to be able to provide those types of managed services, so it’s a very, very powerful way of bringing it all together. Robert Dutt: For that MSP market, you guys sold off Alert Logic’s managed services business to LevelBlue a couple of months ago. What does that signal to MSPs about where you see Fortra sitting in the ecosystem moving forward, in terms of trying to be a technology brand behind the MSP? Faraz Siraj: Well, that’s a perfect fit. I think we realized that the managed service business is not really what our strong suit is. And we aligned our Alert Logic business with a suitor that can take full advantage of that kind of business, and they’re very good at it. We, over time, realized that if you want to do that business, you have to really focus in on it, whereas we had other priorities. And so what that tells the market and other partners out there is that we need our partners to be able to provide those managed solutions. We truly are in the business of making and providing software. We do not want to be in the services game. We want to have our partners provide those services, whether it is managed services or whether it’s installation services, optimization services delivery, we need our partners to do that. And that’s what creates opportunity. And that’s what I’m really excited about with our platform play, as well as where our future direction is as a company around the products that we provide. Robert Dutt: One of the most interesting things I think you guys talk about is the idea of MSPs balancing offense and defense. And I guess I want to dig into what that actually looks like in terms of the service delivery level. Where does offensive insight realistically show up in the day-to-day stack for an MSP? Faraz Siraj: Well, it shows up everywhere, whether you realize or not. It is in whether it is vulnerability management, it’s in offensive security tooling, it is in pen testing, it is in simulations. That takes some knowledge and ability to provide those services around those capabilities. And that’s just from an offensive side. There is a need for support for those particular product sets. On the defensive side, it’s pretty simple. I mean, we have a lot of those defensive protection products, and we need our partners to be able to provide solutions around it. Robert Dutt: Yeah, and MSPs, most I would dare say at this point, are defensive operators by nature. Prevent, detect, respond, deal with the problem. What can MSPs realistically do with offensive capabilities, and where should they not be trying to operationalize offensive capabilities in their stack? Faraz Siraj: Well, the first thing that I would tell them is be comfortable with what you’re providing. Be comfortable with your capabilities that you can go to your market with, with your customers. If you don’t know it, you can certainly learn, but you don’t want to try to pigeonhole yourself into a technology that you’re unfamiliar with. We can help with that. We have a lot of training. We have a lot of classes available through our Fortra Academy that can help them, and we have onboarding that we can help partners with. Again, it would be, I would think about the customer and work backwards. You would want to qualify the customer and qualify their needs. And if offensive security is something that is a pain point for your customer, then investigate it. And sometimes it’s not. And if it’s not needed, why would you want to venture and invest in an area that you’re unfamiliar with? Now I’d love for all of them to do it, but I’m an honest person. Sometimes it doesn’t make the right business sense. Robert Dutt: You guys acquired Red Macros Factory to enhance Outflank Security Tooling. Cobalt Strike is used by red teams worldwide, but it’s also used by threat actors who are probably using cracked copies. That led Fortra and Microsoft to take joint legal action in the past. How do you talk to partners about selling offensive tools when some of those tools have been weaponized against their customers? Faraz Siraj: It’s a discussion point. It’s also sort of a proof of concept in a twisted sort of way. Well, we do not support any illegal use of our products. We do not support using it for the wrong reasons, so to speak. We have strict legal language on it and we have gone to legal with Microsoft about those kinds of things, because we have strict requirements of how you’re going to utilize this tool. If we find out that you’re using it for the wrong reasons, weaponization, we cut it off. And that’s part of the qualification. And that’s also part of the execution and inspection that we look at. These are very powerful tools and they are not for that purpose. And just as another example is when we provide NFR gear, it’s meant for testing purposes and lab gear. You cannot be utilizing it to provide protection from as a customer standpoint, even though it’s not the same completely. It’s similar. And we just, we have to be very transparent and upfront about what these tools are about and how they’re supposed to be used. Robert Dutt: Let’s talk about the program and what you guys are doing there. You’ve introduced guaranteed margins with Fortra Protect and the FortraOne agreement. What problem were you specifically trying to solve with that model and what was sort of the problem with how partners were engaging with Fortra before? Faraz Siraj: Yeah, there’s several problems that we were addressing and yet we came to an innovative way on how to address it. So let’s look at a little history. When you acquire so many companies, your discount structure is all over the place. In Fortra transparency, we had discounts that were in the low 20s and going way north into the higher discounts. And when partners want to work with you, they expect a certain discount table for all products. And when you’re all over the map, you ca

    19 min
  6. Beyond the password vault: 1Password’s channel chief makes the case for identity security as an MSP practice

    APR 1

    Beyond the password vault: 1Password’s channel chief makes the case for identity security as an MSP practice

    Larissa Crandall, 1Password’s global vice president of channel and alliances 1Password is a company many Canadian partners know, but the Toronto-based firm has evolved well beyond the password vault it’s historically been associated with. Now positioning itself as an identity security company, 1Password recently expanded its global partner program, won the 2025 AWS Canada Rising Star Technology Partner of the Year award, and was named to CRN’s 2026 Security 100 list. The company counts more than 180,000 business customers, with over 75 per cent of its revenue now coming from the enterprise side. Larissa Crandall, 1Password’s global vice president of channel and alliances, joins us to talk about what that evolution means for MSPs looking to build identity security practices. Crandall talks openly about the need to “myth bust” how partners think about 1Password, pointing to strategic integrations with CrowdStrike and Zscaler and the company’s growing presence in AI labs and enterprise security stacks as evidence of the shift. The numbers that emerge are striking. Non-human identities – AI agents, service accounts, API keys – now outnumber human identities 82 to 1, according to Crandall, and SMBs remain largely unprepared for the challenge. That’s the gap MSPs can step into. She shares the story of an MSP that made 1Password mandatory across its entire customer base – not as an add-on, but as a baseline requirement – because you can’t credibly sell identity security if you haven’t secured the front door yourself. On building a profitable practice, Crandall identifies three keys: proper discovery, understanding scope and complexity, and having the right skill sets on your own team before delivering it to clients. Partners interested in learning more can visit the 1Password partner program page. Read Full Transcript Robert Dutt: Hello and welcome to In the Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel community for the last 16 years. I’m Robert Dutt, editor of ChannelBuzz.ca, and as always, your host for the show. If you’ve been following the cybersecurity conversation this year, you’ve probably noticed that identity keeps coming up – not as one item on the security checklist, but increasingly as the item. The attack surface is shifting. SaaS sprawl, shadow AI, and a growing universe of non-human identities – things like AI agents, service accounts, and API keys – are creating access governance challenges that traditional security tools were never designed to handle. And for MSPs, that shift represents both a risk and an opportunity to build a real practice around identity security. 1Password is a company that a lot of us know, but the Toronto-based company has evolved beyond the password vault that many partners may remember. It’s now positioning itself as an Extended Access Management platform, recently expanded its global partner program, and counts more than 180,000 businesses among its customers. Joining me today to talk about what that evolution means for the channel is Larissa Crandall, global vice president of channel and alliances at 1Password. We’re going to dig into why identity has become the front door to the security conversation, what MSPs need to understand about non-human identities before their customers start asking, and what building a profitable identity security practice actually looks like. Larissa, thanks for taking the time. I appreciate it. Larissa Crandall: Thank you so much for having me. Excited for a conversation. Robert Dutt: We keep hearing that identity is the new security perimeter. For a lot of MSPs, the bread and butter is still firewall, endpoint, some MFA. Can you help me with what’s changing in the threat landscape that makes identity security an urgent, a “build a practice around it right now” kind of opportunity? Larissa Crandall: Yeah, absolutely. AI is here to stay. I think the opportunity for MSPs is now. It’s prevalent. We’re seeing a lot of MSPs build practices around identity security, and those are the ones that are getting ahead of it, are leading the charge. I think for us personally, spending a lot of time with MSPs, the attack surface has changed. It’s no longer about human, it’s about non-human identities, and it spans across SaaS applications, endpoints, APIs, service accounts, and AI agents. All of the MSPs that are getting ahead of it are helping our customers and growing. Robert Dutt: You guys have been around for 20 years now or so. I think for a lot of folks, the on-ramp, the familiar place is the personal password vault, of course. Some partners certainly are selling you alongside other tools, are working you into the mix. What would surprise a partner who hasn’t looked closely at 1Password in the last couple of years about where you guys are at right now? Larissa Crandall: Love this question, because I’ve been talking to a lot of partners. As we’ve built out the partner program that we just launched and going to truly partner first, we have to – what I call – myth bust. A lot of how people perceived us is just traditional EPM, the Enterprise Password Manager business, into this true solution that’s attached to everything that they’re already selling. For instance, we have large integrations with CrowdStrike and Zscaler, and that’s getting the attention of some of the partners out there not realizing that we fit into that full conversation and that tech stack as a platform play, versus thinking of us traditionally just on that human-centric credential management play. We’ve definitely flipped the script, I would say, on having sellers think of us different. MSPs – we also have a lot that we’re doing with AWS, and that has changed some of the landscape for us here, is positioning that full technology solution. Robert Dutt: You touch on partner first on the program launch. Can you walk me through what partner first means from a 1Password point of view at this point and the highlights there in terms of what it means to your partner base or your prospective partner base? Larissa Crandall: Sure, absolutely. We built what I call a customer-centric partner strategy. What that means to us internally – and as I’ve shared this with our partner ecosystem – is however a customer wants to transact with us. Via AWS Marketplace, whether they want to work with us with a partner through Marketplace, if they want to work with their traditional reseller and VAR partners out there. We have obviously SMB customers, a lot around working with their MSPs. We have that all taken care of, where we have prescriptive partners across the globe as well as working with our distribution partners. What that means for us internally is we have worked through an entire strategy top-down. It goes from our executives all the way through our sellers that they’re to engage partners. Now it could be an existing account that we have that we’re wanting to bring a partner into. We’re also spending a lot of time with partners, both new and existing, teaching them the 1Password story and teaching them how we fit in what they’re selling today and what the opportunity is. Increased enablement, certifications, all of that. Again, it goes back to what I would say is that myth bust of how you think of us and what we’re doing, versus how we’re getting a lot of attention from partners that have talked with us previous but are seeing us different, talking about putting us in their AI labs and their security practices and a full wrapper into platform. Robert Dutt: That’s two fronts of myth busting, or developing the stories to partners. Where would you say you’re at in getting that out there, broadly disseminated and well understood on both of those fronts? Larissa Crandall: It’s a daily, right? I think it’s a daily spend. I spent this morning talking to two partners and they were both new. They were in a region that we have not spoken to before, and it was newer partners wanting to learn more because they’re hearing the market demand and they’re having customers call about 1Password and identity security. That has flipped as well, where identity security is no longer a “it’s a nice” – it’s needed. Same thing across MSPs. They’re building foundational practices as well around identity security and we’re having them come to us and say, “Teach us more. How do we build this? How do we do the discovery and how do we get in front of it?” Especially around AI. Robert Dutt: You’ve talked about something you call the Access-Trust Gap – the space between what IT can see and control versus what employees are actually using to get their work done. Can you walk us through what that looks like in a real organization and the why as to why traditional IAM tools aren’t closing that gap? Larissa Crandall: I have an example for you that I love to use, and it’s related to an MSP that we have that shared with us how they personally worked with 1Password. It’s a mature MSP that made a deliberate decision as a company to bring in 1Password and make it mandatory for all of their customers. Not an add-on – make it mandatory for all. They did that because they wanted to ensure that security was embedded into everything they did from the start and how they interacted with customers. The reason that they did that is they wanted to make sure – if they weren’t ahead of it and they weren’t giving customers a secure way to manage their credentials, they would find their own way. That’s the problem still. There’s spreadsheets, there’s shared sticky notes. You put it in your phone. That’s never good. This MSP shared that and said, “If we’re going to go preach this and sell 1Password, we’re going to basically do it ourselves.” If you leave it up to your own devices, employees will do it on their own and that’s the

    21 min
  7. WatchGuard CEO Joe Smolarski on doubling MSP margins, the Kaseya playbook, and why Canada’s cybersecurity moment is now

    MAR 31

    WatchGuard CEO Joe Smolarski on doubling MSP margins, the Kaseya playbook, and why Canada’s cybersecurity moment is now

    Joe Smolarski, CEO of WatchGuard Technologies, joins the podcast for a wide-ranging conversation about why the company believes 2026 is “the year of the cybersecurity-focused MSP” – and what that actually means beyond the tagline. Smolarski came to WatchGuard in November after nearly a decade at Kaseya, where he served as president and COO. He’s been open about applying what he calls the “Kaseya playbook” to WatchGuard – driving down platform costs and consolidating tools to improve partner margins. In this conversation, we dig into what parts of that playbook he’s bringing, what he’s leaving behind, and why he believes WatchGuard can double MSP margins on cybersecurity. We also explore WatchGuard’s latest threat research, which showed a 1,500% spike in unique endpoint malware, and what the company’s 2026 predictions – including the first fully autonomous AI-executed cyberattack and the extinction of crypto-ransomware – mean practically for MSPs and the customers they protect. The conversation takes a Canadian lens as well. Smolarski discusses WatchGuard’s new partnership with Bell Cyber, the data sovereignty investments required to win that deal, and why he sees the Canadian market as ripe for its next level of MSP maturity – driven by regulation like Bill C-26 and the consolidation wave now reaching this side of the border. We also touch on WatchGuard’s 30th anniversary, what longevity means in a market full of startups and PE roll-ups, and how Vector Capital’s decades-long involvement shapes the company’s outlook. Read Full Transcript Robert Dutt: Hello and welcome to In The Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel community for the last 16 years. I’m Robert Dutt, editor of ChannelBuzz.ca and your host for the show. My guest this week is Joe Smolarski, the CEO of WatchGuard Technologies. Joe took the helm at WatchGuard back in November after spending nearly a decade at Kaseya, where he served as president and COO. He’s now leading a company that just celebrated its 30th anniversary, has been 100% channel-focused since day one, and is making a pretty bold claim that 2026 is the year of the cybersecurity-focused MSP. Now, that’s the kind of line that can sound like vendor marketing if you’re not careful, so I wanted to dig into what’s actually behind it. We talked about the explosion in endpoint malware, why the shift from ransomware to pure data extortion changes the game for MSPs, what Joe is bringing from his Kaseya experience and what he’s leaving behind, and why he thinks Canadian MSPs are at a tipping point. We also get into the economics of it all – his promise to double MSP margins on cybersecurity, and how WatchGuard’s platform play is supposed to make that math work. Let’s get right into it. My chat with Joe Smolarski. Thanks for taking the time, I appreciate it. Joe Smolarski: My pleasure, Rob. Robert Dutt: Security has been one of the biggest, maybe the biggest, growth driver for MSPs for years, and your company is saying that 2026 is the year of the cybersecurity-focused MSP. Help me understand what makes this year different from the last three or four, where people have been seeing the same kind of momentum in security in the MSP space. Joe Smolarski: Yeah, sure, Rob. I think ultimately many of the stats are clear, and they’re really eye-opening. I think no longer are MSPs having to educate and evangelize why it’s needed, because when you see eye-popping stats like the fact that cybercrime is the third largest GDP in the world behind the US and China, it’s like, holy cow, how the heck is that possible? But it’s escalated very, very quickly. And unfortunately for SMBs, SMBs have become the focus of those attacks, and I think that’s becoming clearer and clearer every day. SMBs used to feel as though they’re not the focus, that the big guys will be the focus. But what we’ve seen – and unfortunately I have some firsthand experience – is that when cybercriminals attack the big guys, they have people come after them. If you know my past, I served as president and COO of Kaseya for nearly a decade prior to becoming CEO at WatchGuard. And there, on July 2nd of 2021, we got attacked by Russian cybercriminals. When that occurred, within four hours I had the FBI and the White House and Department of Homeland Security and everybody else in my office, which was not very pleasant. So you get the attention when you’re a major provider, a big company. Look at Stryker right now, what they’re going through. In that situation, within four hours, they’re all in my office. Within three weeks, we got the bad guys, and those bad guys are sitting in a federal prison right now. But that’s not the case when it comes to SMBs, and it’s a shame. I had access to a bunch of inside information within the government when we went through that, because we also hired the FBI lead as our CISO at that time. And what they say is they’re just overwhelmed. There’s no way that they could get to all of the attacks that are occurring. The big guys get attention and the small guys don’t, and that’s become prevalent. So I think ultimately, this is the year for cybersecurity to get to that next level because the pace of attacks is picking up so much, in particular in the SMB market. We posted our bi-annual security report and showed a 1,500% increase over the last year, just in the velocity of attacks, which is scary. It’s scary for SMBs. And quite frankly, even if they have some of their own internal IT staff, they’re not going to be at the level that they require to stay protected. So they’re relying on the fantastic MSPs that are out there to get them to that next level. I will say, I caught up with three or four large MSPs in Canada over the last week, just to prepare for this a little bit, just to get some of the latest trends directly from the MSPs themselves. And they said they still feel like Canada is a little bit behind when it comes to the US, just a little bit behind in terms of education and things like that. And certainly, small business is so prevalent in Canada, given how dispersed it is. So they’re working on that. I know your government in Canada is working to increase regulation. I think some of the fighting back and forth with Trump and Carney has been interesting and ultimately fueling the Buy Canadian campaigns and some of that stuff. But you’ve got a lot going on. I know you’ve got a C-26 bill from an infrastructure perspective trying to be passed, just to make sure that the awareness is there for all businesses on what needs to be protected – supply chain and everything else. But it’s a huge opportunity for the MSP market to take it to that next level, because from my perspective, Rob, you have to. What I’ve seen – and this is very, very unfair – is that when a small business even declines that next level of, say, platinum service from an MSP, they’re like, “I don’t need that. We don’t need that level of protection. We’re not willing to pay that amount.” If something negative happens, then unfortunately the MSP still gets blamed. And that’s ridiculous, but it’s the reality of the situation. So this is the year to capitalize on it. There’s enough news and information out there that supports everything. It’s an exciting year and, of course, a nervous year, because you’ve got to protect your clients and use the best technology and services to get there. Robert Dutt: You touch on the 1,500% spike in endpoint malware in the second half. A quarter of those attacks are evading signature-based detection. At the same time, though, your team is predicting that crypto-ransomware is essentially going extinct this year as attackers say, “You know what? We’d rather just steal the data and extort you.” What does that shift mean practically for how MSPs need to think about protection and what they’ve been offering, given that ransomware has been such a driver for the last half decade or so? Joe Smolarski: Yeah, I think ultimately you just have to make sure that you have layers of protection. To your point, lots of things get through. You could have the very best technology in the world, whether that’s WatchGuard or some of the other leading providers, and things can get through. Ultimately, that’s why you need the layers. One of the things that you should also consider is the platform approach. There are many providers, WatchGuard being one of the leading providers in the MSP space. When you have a platform that gives you multiple layers and those layers get to be correlated together, it just increases your chances of detecting those things. You may see something on the firewall that’s not definitive evidence of something happening, but when you piece that together with what’s happening on the endpoint and you’ve got those two data points, you piece it together faster than point solutions can. I think ultimately you need to make sure you have 24/7 SOC monitoring. Things that you didn’t think were possible – you thought you put in the best products to protect you, why do I need that, nothing should get through. You just threw the stats out there that things do get through. The only way to stop that is to catch those anomalies at one of the respective layers. If you’re at 99.9999%, you’ll get it at the product level. But what gets through – and with the velocity of attacks that is there – you’ve got to make sure you’ve got AI-based SOC solutions and MDR solutions backed up by great security professionals to ensure you’re protected. Robert Dutt: On the AI tip, you guys have predicted the first fully autonomous, end-to-end executed-by-AI cyberattack this year. That’s a big call. What would that look like? And how do I, as a mid-market MSP, even begin to prepare for something like that? Joe Smol

    35 min
  8. ESET’s cybersecurity scholarship is building a talent pipeline

    MAR 30

    ESET’s cybersecurity scholarship is building a talent pipeline

    Bob Bonneau, country manager for ESET Canada The ESET Women in Cybersecurity Scholarship is in its eleventh year globally and its fifth year in Canada. This year, ESET is awarding three $5,000 scholarships to Canadian women pursuing careers in cybersecurity, with applications open through April 8, 2026. The numbers are substantial. Across North America, ESET has awarded $187,000 to 39 women since the program launched. In Canada alone, 14 women have received a combined $50,000 since 2021. But here’s what caught our attention. When we asked ESET Canada country manager Bob Bonneau where past recipients have ended up, the answer was honest: they’ve largely gone to work at tech companies at the source of the technology, not at channel partners or MSPs. It’s a gap Bob acknowledged openly, and one he committed to thinking about differently as the program evolves. That matters for the channel. Canada’s cybersecurity workforce gap is well documented — the ISC2 Cybersecurity Workforce Study puts women at roughly 22% of the global cybersecurity workforce, and Canadian numbers have been largely stagnant for two decades. Every MSP competing for security talent is drawing from the same thin pool, and retention is just as hard as hiring. As Bob put it, the second someone updates their LinkedIn with cybersecurity experience, the recruiters come calling. Worth noting: the scholarship is open to any woman enrolled in or accepted to an accredited Canadian college or university, including those studying part-time while working. That means someone already in the channel who’s upgrading her skills could be eligible. If you’ve got someone on your team who fits, point her toward the application before April 8. Read Full Transcript Robert Dutt: Hello and welcome to In The Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel for the last 16 years. I’m Robert Dutt, editor of ChannelBuzz.ca and your host for the show. If you’ve been in the channel for any length of time, you know that finding and keeping cybersecurity talent is one of the biggest operational challenges MSPs and other solution providers face. Canada needs to fill roughly 25,000 cybersecurity roles and produces fewer than 4,000 graduates a year. That math doesn’t work, and it’s not getting better fast enough. One program that’s been trying to move the needle is the ESET Women in Cybersecurity Scholarship, now in its 11th year globally and 5th year in Canada. This year, ESET is awarding three $5,000 scholarships to women in Canada who are pursuing careers in cybersecurity. Applications are open right now through April 8th. But I didn’t want to just tell you that the scholarship exists. I wanted to dig into the thinking behind it. Why a security vendor invests in something like this, what happens with the talent it produces, and whether programs like this are actually connecting to the channel or feeding the pipeline somewhere else entirely. My guest today is Bob Bonneau, country manager for ESET Canada, and he had some candid answers to those questions. Let’s get right into it, my chat with Bob Bonneau. Bob, thanks for taking the time. Nice to chat with you again. Bob Bonneau: Likewise, I appreciate being here. Thanks for the invite. It’s always a pleasure to catch up. Robert: The ESET Women in Cybersecurity Scholarship is in its 11th year now, 5th year in Canada. Can you tell me what was the original thinking behind expanding the program here, and has the program evolved in ways you didn’t expect when you were thinking about that five or six years ago? Bob: Yeah, for me, as you know, I took over the role of leading Canada about six years ago, and it was too soon in the first year for us to kind of jump on board. But having been exposed to what the US office had initiated from an ESET perspective in terms of the scholarship was certainly something that I thought was just a great initiative and something that I was excited to kind of join and be part of. So I quickly made plans to ensure that we were included in the next year, and we’ve been a part of it ever since. I would say initially, we started with a single $5,000 scholarship, and as much as there was — it was an investment we were making that, contrary to popular belief where every vendor-invested dollar, especially in something like this, has to have some sort of ROI metrics to it — this didn’t have that. This is purely something that we felt passionate about needing to do, and we thought it addressed a couple of different main areas in our business that we were trying to address. But when I look at the early days, it was funny because it is very much a marketing effort just to get the information out there that we’re in fact offering it. So I would say we had the $5,000 scholarship offered and we worked hard to get that communicated out so that we could get a good submission base to start to evaluate. And if we fast-forward to going into this year, it’s now scaled to three $5,000 scholarships that we’re offering. What used to be largely an internal company effort — we would look at the submissions and evaluate them and select the winners — there’s now a 10-person selection committee made up of representation from business, tech partners, large customers of ours, our reseller community. So it’s really expanded from there, and it’s great to see. Part of why we scaled it is because the volume of submissions has grown so much, which is great. But quite frankly, the impressiveness of the applicants just makes that job really hard. So it really has evolved to what we’re seeing today, and it’s been great to be part of that. It’s also evolved from a company perspective, which is great. Now having, I think we’ve got seven countries participating in it. Robert: Wow. So far you guys have awarded $50,000 to 14 Canadian women through this program. When you look at where past recipients have ended up, they’ve largely gone to work at tech companies rather than, say, roles in the channel with partners or MSPs. Is that the intended outcome, or is there a gap between investing in the pipeline and seeing that young talent show up in the channel? Bob: Yeah, it’s a great point. I think the effort was obviously established to address two main gaps that we have in our business today. One, obviously, the underrepresentation of women in technology. I think that number is hovering around the mid-20% in Canada, but it’s only grown from about 21% in 2001. So it’s been largely stagnant — a number that we wanted to, in at least our small way, try to impact. The broader challenge obviously is the skills shortage in cybersecurity, which there’s no shortage of articles around. I think the more recent data suggesting 25 to 30,000 open positions in Canada, with that gap expected to hit somewhere around 100,000 by 2035. And globally it’s even more ridiculous — it’s 4.8 million, I think, is the current number. So two major challenges that we have in our industry, but you bring up a good point. I think initially it was less about — I don’t think we were thinking that deep in terms of how does this impact channel, how could it impact channel. I would say we’re engaging our channel partners through the effort, and they’re really enjoying being part of the selection committee and those types of things. We’re seeing partners, as a result of their participation in the selection committee, starting to do their own version of this, which is great to see. But I think you’re right. I think there’s probably an opportunity for us to evangelize the channel part of the opportunity from an employment perspective as we’re doing some of this effort, and it’s probably something that we can look to in the future. But holistically, the gap and the challenge in terms of women in tech as well as just the skills shortage affects both our partner community and our customer base as well. So yeah, I think you bring up a good point. There’s probably an opportunity for us to maybe use our exposure to the applicants to try to evangelize the channel a little bit more going forward. Robert: Well, and it’s often a good entry point for folks just starting out in cybersecurity. I can tell you that every MSP I’m talking to, one of their biggest challenges — the biggest challenge — is hiring the right people, especially in security, for the numbers that you point out. And I think as you say, maybe there’s an opportunity for you guys too. I mean, I understand that the goal of the scholarship is to grow the overall pool and then the market sorts it out. But it does occur to me — the scholarship itself isn’t strictly limited to students who are purely full-time at a school. If I’m a solution provider who has a female employee who also happens to be upgrading her skills at college part-time, they could theoretically be pointing her toward this. Is that a use case you’ve seen or thought about? Bob: We haven’t seen it in terms of — we tend to see more full-time students applying. We haven’t seen those returning to either enhance their current skills or — actually, we have seen some submissions from part-time students. So let me correct that. But specifically from channel, not to date. But you do bring up a great point. It’s one that we — I think if we look to subsequent years, next year, to really promote both the channel to the applicants who may be applying, but also to the channel to solicit those that might want to consider applying for it. For those that are doing some reskilling on their part, there’s probably an opportunity for us to evolve that. Again, like I said, the initiative has been more philanthropic than it’s been carved down into how do we use this as an opportunity to work with the channel more. But I think you bring up a great concept and idea and one that I certainly will take

    18 min
See All (25)

About

Cutting through the noise for Canadian VARs and MSPs

Information

  • Creator
    ChannelBuzz.ca
  • Years Active
    2011 - 2026
  • Episodes
    25
  • Rating
    Clean
  • Copyright
    Copyright © ChannelBuzz.ca 2026
  • Show Website
    ChannelBuzz.ca