ChannelBuzz.ca

ChannelBuzz.ca

Cutting through the noise for Canadian VARs and MSPs

  1. Tanium Canada’s new country leader on why autonomous IT isn’t just an enterprise play anymore

    23시간 전

    Tanium Canada’s new country leader on why autonomous IT isn’t just an enterprise play anymore

    Adam Ostopowich, country manager for Tanium Canada Tanium has long been known as a platform for managing endpoints at massive scale – federal governments, Fortune 500 environments, organizations with hundreds of thousands of devices. But the company’s newly appointed Canada country manager, Adam Ostopowich, says the mid-market represents Tanium’s biggest untapped opportunity in Canada, and the plan is to get there entirely through partners. In this episode, Ostopowich explains what changed when Tanium unified its Canadian operations under a single national structure covering enterprise, mid-market, major accounts, and public sector. Previously, partners worked with segment-specific contacts; now there’s one channel organization for all of Canada, designed to simplify engagement and open up new customer tiers for solution providers. We also dig into Tanium’s significant Government of Canada win through the EVAS program, which delivers real-time endpoint visibility across federal departments via Shared Services Canada and partner Computacenter. Ostopowich discusses what that means for the broader partner ecosystem and addresses the data sovereignty question head on, describing Canadian data residency as a “core requirement rather than an optional one.” The conversation also covers Tanium’s strategic shift from autonomous endpoint management to a broader autonomous IT platform vision, unveiled at Converge 2025, including agentic AI capabilities and ServiceNow integration. Ostopowich clears up a common misconception – Tanium is not an EDR and doesn’t compete with endpoint detection tools, but rather augments them with real-time operational intelligence. He also shares a striking data point: proof of concepts routinely uncover 10 to 25 percent more endpoints than organizations even knew they had. Named a Leader in the 2026 Gartner Magic Quadrant for Endpoint Management Tools and a five-time 5-star CRN Partner Program Guide recipient, Tanium is betting on doubling its Canadian footprint in two years – 100 percent partner-driven. Read Full Transcript Robert Dutt: Hello and welcome to In The Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel community for the last 16 years. I’m Robert Dutt, editor of ChannelBuzz.ca and your host for the show. Tanium has been a name that most people in the IT space associate with large-scale enterprise endpoint management. Think hundreds of thousands of endpoints, federal government deployments, Fortune 500 environments. But the company has been making some moves in Canada that are worth paying attention to. They recently appointed a new country manager, unified their Canadian operations under a single national structure, and are talking openly about going after the mid-market, and doing it entirely through partners. On top of that, they’ve landed a significant Government of Canada win, they’ve achieved Protected B certification, and they’re expanding their footprint with boots on the ground from Calgary to Ottawa. My guest today is Adam Ostopowich, the new country manager for Tanium Canada. And we’re going to talk about what this restructured approach means for Canadian solution providers, where the Canadian partner opportunities actually are, and how Tanium’s vision of autonomous IT fits into what’s happening in the Canadian market right now. Let’s get right into it. My chat with Adam Ostopowich. Adam, thanks for taking the time. I appreciate it. Adam Ostopowich: Thanks a lot for having me, Rob. I’m really excited to be here. Robert Dutt: So you’re just stepping into the role, heading up Tanium Canada. Tell us a little bit about the priorities in your new role, sort of where you’re investing your time and effort, particularly when it comes to partner-facing things. Adam Ostopowich: Yeah, that’s a great question. So it’s an exciting time to be at Tanium. It’s also an exciting time to be Canadian. You know, with the way the market’s headed right now, there’s a ton of opportunity. Really, our vision is to help build a more secure, resilient, competitive nation by empowering organizations with real-time visibility, control, and autonomous IT capabilities to become unstoppable. Now, where this becomes critical in partnering is we really do need to work closely with our partners in order to strengthen the cybersecurity backbone of Canada. And it’s really about protecting Canadians and the companies that drive our economy. Partnering has never been more important in technology. It’s really about bringing platforms together, integrating multiple solutions together, and really, we need our partners to help drive that with us. Robert Dutt: You guys recently rolled out a new unified national structure across Canada. Can you tell me a little bit about what that means in practice? What did the organization look like before, and what changes with this for a partner in, say, Calgary or Ottawa or Montreal or wherever? Adam Ostopowich: So historically, Tanium’s definitely invested in the Canadian market, but it’s been in definitely a little bit more of a unique way. We didn’t have as many dedicated resources located in Canada. That’s really shifted over the last couple of years. And more recently, with February 1, the start of our fiscal year, we really had to make a strategic decision to bring all those resources together under one umbrella and continue to invest in having dedicated resources on the ground supporting our customers, but also interfacing with folks like product marketing, customer success, and so on, across the board. Partnering also became extremely important with the strategy. In the past, we had multiple partner managers focused on different market segments of our business. Now we have one channel manager focused across the board on every market segment, and that’s so important for Canada, especially as a lot of the partners we work with, they cross all market segments. It’s very rare that you’ll come across a partner that’s just focused in one place. So having that unified approach, especially in the channel, has never been more important in Canada. Robert Dutt: So they were previously focused vertically or geographically, how was that? Adam Ostopowich: So primarily focused on – Tanium segments the market based on endpoint potential, and so it was based on the bands of endpoints that our customers would be. So that could be commercial, it could be mid-market, it could be enterprise, and then of course we’ve got our public sector and federal business as well. So now we’re pulling that all together and saying, “Hey, we need to go to market in a more unified way, and we need to pull in our customer success stories, make sure that our partners are aware of every stream of business that we do,” because a lot of that crosses into multiple organizations across the board. Robert Dutt: The EVAS win with the Government of Canada, obviously pretty significant for you guys. What does the partner ecosystem around that look like? Is there room for solution providers beyond Computacenter, who’s kind of the go-to partner there? Adam Ostopowich: Yeah, so we’re definitely partnered closely with Computacenter Canada. There’s potential opportunities across the board. I mean, ultimately, we’re servicing the Government of Canada, but there’s also the contracting in place with Shared Services Canada that’s ultimately going to be touching any organization that buys through that mechanism. So there’s a good chance that many of those organizations will already work with other partners that potentially are already working with Tanium, or there’s an opportunity to expand our partnerships in those spaces. But for the most part, right now we’re heavily invested in Computacenter and how we’re supporting that contract across the board. Robert Dutt: Historically, Tanium has been an enterprise and government play. With the mid-market now under the same national umbrella and building sort of across those bands, as you describe, in endpoints, are you actively trying to reach a different class, a different size of customer in Canada than you were in the past? Adam Ostopowich: Yeah, absolutely. Tanium’s roots are absolutely in the large enterprise space, and we define that as hundreds of thousands to millions of endpoints. Now, Tanium was built to handle the most complex environments in the world. However, what we’re learning very quickly is there’s a massive opportunity down market as well to use the same technology in a rapid way. And really, it’s never been more important as we think about autonomous IT and AI. Ultimately, Tanium’s platform is best positioned to deliver data in real time. And that’s where going into the mid-market space really does help strengthen our growth strategy across Canada. Robert Dutt: As you look at that mid-market and even below kind of level in terms of customer size, how does that change in terms of go-to-market, who you’re working with on the partner side? Basically, what does the channel look like for that space? Adam Ostopowich: Yeah, so right now we work with a multitude of channel partners. Everything from your SIs to your technical partners like Microsoft and ServiceNow that we’re deeply embedded with. But there’s also a lot of VARs and MSPs that we work with as well. And ultimately, especially in the mid-market, we’re often working with more boutique service partners that help us to get into existing customers they’re already with or help us to service customers that we already have in a better way. So that’s a more localized and near experience for them. Robert Dutt: For somewhat obvious reasons, data sovereignty is a huge issue in Canada right now. How much is that driving the conversations that you’re having with customers and how does that translate into partner-led opportunity? Ada

    22분
  2. Your tools are the threat: ESET’s Tony Anscombe on MSP supply chain risk

    1일 전

    Your tools are the threat: ESET’s Tony Anscombe on MSP supply chain risk

    The Huntress 2026 Cyber Threat Report found a 277% year-over-year surge in the abuse of RMM tools, which now account for roughly a quarter of all observed incidents. The ConnectWise 2026 MSP Threat Report frames 2025 as the year of “the abuse of trust,” with attackers increasingly exploiting valid credentials, misconfigured remote access, and trusted software updates rather than relying on novel exploits. For MSPs, the implication is uncomfortable: the tools you use to manage and protect your clients are increasingly being turned against you and them. Tony Anscombe, Chief Security Evangelist at ESET, returns to the podcast to dig into how these attacks actually work – from daisy-chaining multiple CVEs for entry, escalation, and persistence, to ClickFix-style social engineering where users are tricked into pasting malicious PowerShell commands through fake browser prompts. The conversation also gets into why attackers are going after MSP toolchains specifically, the patching dilemma MSPs face when every hour of delay is an hour of exposure, and why groups like Akira are now targeting backup infrastructure first to neutralize the recovery path before encrypting. On the business side, Tony is candid about what a breach through your own tools means for trust, reputation, and survival – and offers practical starting points: audit your environment, clean up stale credentials, patch on cadence, and run tabletop exercises with your customers, not just internally. He also introduces the concept of cyber warranties as a potential competitive differentiator for MSPs looking to stand out on RFPs. This is the second in an ongoing series of conversations with Tony. The first, covering the cybersecurity trends MSPs can’t ignore in 2026, is also available. Read Full Transcript TRANSCRIPT TO COME

    37분
  3. Communications 101: Gareth Pettigrew on why PR has never mattered more for MSPs

    2일 전

    Communications 101: Gareth Pettigrew on why PR has never mattered more for MSPs

    Gareth Pettigrew, founder of Pettigrew Communications I’ve thought about doing an episode like this for a while, but I kept bumping into the same problem: the “so what” question. Why should a 15-person MSP owner, already wearing six hats, care about communications? Gareth Pettigrew cracked that code in about 30 seconds. As the industry moves from search to chat, non-paid citations and earned media are proving to be critical to how large language models answer queries and surface companies. If you’re not showing up in that landscape, you’re increasingly invisible in ways that didn’t exist two years ago. Gartner is projecting PR budgets to double over the next year. The ground has shifted. Gareth spent years leading partner communications for Cisco and Okta, and what always stood out to me is that he genuinely understands the partner business – not just the vendor talking points. He’s now launched his own consultancy, Pettigrew Communications, offering fractional senior comms leadership and project-based consulting for companies across the channel. In this conversation, we dig into why PR isn’t what most partners think it is anymore – it’s not press releases and pitching journalists. The media landscape has changed dramatically with AI, and the real opportunity for small partners is in thought leadership, LinkedIn engagement, and building an externally wired narrative that positions you as a trusted voice in your niche. Gareth offers a three-week roadmap: week one, listen to the industry conversations and identify one or two niches you can credibly insert yourself into. Week two, build your story – one page, three to five core messages. Week three, identify ten influencers to follow. Then activate on LinkedIn by commenting meaningfully for a month before posting your own perspectives. We also talk about common mistakes – like treating PR as a marketing tactic or relying on internally oriented messaging – and what success actually looks like when you’re starting from zero. This is the first in a planned series. Future episodes will go deeper into messaging, LinkedIn best practices, crisis communications, and more. Read Full Transcript Robert Dutt: Hello and welcome to In The Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel community for the last sixteen years. I’m Robert Dutt, editor of ChannelBuzz.ca, and your host for the show. My guest today is Gareth Pettigrew. Gareth spent years leading partner communications at Cisco and most recently at Okta, and he’s now launched his own consultancy, Pettigrew Communications, offering fractional comms leadership to companies across the channel. I’ve known Gareth for a long time, and what’s always stood out to me is that he genuinely understands the partner business – not just the vendor talking points, but how partners actually operate and communicate day to day. I’ve wanted to do an episode on communications and PR for partners for a while now, but I kept bumping into the same problem: I couldn’t crack the “why should a 15-person MSP care about this” question in a way I thought would actually land. And then I talked to Gareth, and he cracked it in about 30 seconds. We’re going to get into why communications matters more right now than it ever has, why it doesn’t have to be the heavy lift you think it is, and Gareth’s going to give you a practical, week-by-week roadmap for getting started – even if you have zero budget and zero comms experience. This is also the first in what we’re planning as a series. Gareth and I are going to go deeper on specific threads in future episodes – things like crisis communications, LinkedIn thought leadership, working with your vendor’s PR team – so think of this one as the foundation. Let’s get right into it, my chat with Gareth Pettigrew. Robert Dutt: Gareth, thanks for taking the time. I appreciate you joining us. Gareth Pettigrew: Glad to be here, Rob. Robert Dutt: I thought of you to have this conversation because we’ve sat down at many conferences and with many vendor execs when you were running comms around the world, one might say. You know, channel leaders from Cisco and even after you’d moved off the partner beat specifically, I think you always did a really good job of, when talking to us on the channel side, framing up the partner side of the conversation in a way that leads me to believe that you’ve got a pretty good grip on what a lot of these guys are doing, which I think is really important for this conversation. This is something that I’ve thought about doing for a while, doing an episode like this, but I kept bumping into the same problem. Basically the “so what” problem. Why should I care about communications as a 15-person MSP owner? Then when we did our pre-call to discuss the possibility of doing this and where it could go, you kind of cracked that code in about 30 seconds. So let me put it right to you. For that 15-person MSP kind of partner who’s listening to this, they’re busy, they’re wearing six hats. They own marketing. They oversee sales. They probably do HR. They have a business to run. Why should communications be on their radar right now, and what’s changed that makes that even more urgent than you would have said a few years ago? Gareth Pettigrew: Fundamentally, in a word, like almost everything right now, it’s around AI. And perhaps not intuitively, it appears that PR is emerging as one of the big winners of AI. Maybe not for the reasons you think, though. Number one is that non-paid citations, and specifically earned media, are proving to be incredibly important in terms of the LLMs answering their questions. So as the industry shifts from search to chat, we’re seeing PR be much more important in terms of that overall mix. The second thing, and this will resonate with a lot of people, is the amount of AI slop that’s out there. And Rob, as a journalist, I see you laughing. What we see is a lot of content being created, but it’s all generic crap. It’s all the same. What happens is that damages trust, damages customers’ belief in executives, in companies. So increasingly we’re seeing companies, and especially it’s happening a lot at the higher end of the market, executives are really investing in human communicators to help them break through the slop and stand out. So that’s the real reason for why now. I will say though, Rob, I think at the end of the day for PR, you need two ingredients. You need a story and you need a storyteller. And one of the things, why I’ve always been partner-focused, it wasn’t just because I liked the channel. It was self-interested as well, in that I found some of the best storytellers in the industry weren’t the vendor executives, they were the partner executives. So I’ve always been stunned that more partners don’t lean quite heavily into comms as a real big part of their new biz and their marketing mix. A lot of them are really well positioned to raise their awareness through communications. Robert Dutt: So tell me a bit about that. I’m curious what you’ve seen. What sets apart those partners who you’ve sat there and thought, “You know what, you could be doing my exact role here and telling this story.” What is it, and particularly what separates those who do it really well and those who just kind of either go through the motions or leave it on the table, as it were? Gareth Pettigrew: And let’s be clear, everyone isn’t a great storyteller. But what I’ve seen is that in the partner communities, we’re rife with the type of personalities that make for great storytellers. A lot of those people with entrepreneurial spirit who are very proactive sellers, they spend their day not talking to engineers and vendors and all of that stuff, but they spend their day talking to customers. So they know what’s top of mind for their customer. Often with vendor executives, that’s one of the biggest challenges. It’s pivoting from that internal orientation to an external orientation. And a lot of partners are already there. So I’ve really seen some come across consistently. I’ve seen partner executives be on the level with my top executives at the vendor, or even better. So they’re in a great place. Robert Dutt: So for the partner who’s hearing this and thinking, “Okay, I get it. That’s cool. I can tell my story and I understand the customer’s viewpoint, so I should be able to put it in their words and their thoughts. But I don’t have the budget and I definitely don’t have a comms person, nor is that on my roadmap of my next few hires.” I think a lot of people still picture PR as press releases and pitching journalists, and that feels like a lot of work. How would you position what communications actually looks like today for a company at that kind of 15-person size? Gareth Pettigrew: I think the biggest blocker to companies getting involved in PR is they’ve got a legacy idea of what PR is. PR equals press release. That’s 15, 20 years ago. The reality is, especially over the past year and now with AI, we’ve seen the media landscape change absolutely dramatically. The media business model has been disaggregated with Google and others blowing up the advertising business model. And we’ve seen a decrease in some ways in terms of the number of journalists that we have out there. But an increase in some other mediums – things such as podcasts, things such as Substack. We see much more new media, much more niche media. And that’s in the traditional, what we call the earned space. We’ve also seen the social media rise. We’ve seen the advent of owned media, be that executives taking a thought leadership stance on LinkedIn or X as it may be, or in terms of their newsrooms. A lot of vendors do this. They turn their newsrooms into actual content destinations to get t

    27분
  4. Okta’s Canadian bet: Data cell, 600 employees, and a plan to triple the business

    3일 전

    Okta’s Canadian bet: Data cell, 600 employees, and a plan to triple the business

    Ryan Sydor, head of Okta Canada When a global SaaS vendor says it’s investing in a national market, what does that actually look like? In this episode, we put that question to Ryan Sydor, Okta’s Area Vice President and Country Manager for Canada. Okta has been making some significant moves north of the border. The company now has over 600 employees in Canada, including an engineering hub in Toronto – not just a sales branch. It recently launched a Canadian data cell based in Montreal with a Calgary failsafe, designed to keep customer identity data in-country and open the door to regulated sectors like government, financial services, and healthcare that previously couldn’t deploy Okta due to data residency requirements. French language support is also part of the rollout, with an eye on Quebec’s public sector. On the channel side, Sydor says Okta is now running over 80 percent of its Canadian revenue through partners, up from roughly 70 percent a few years ago. The company has been bringing select Canadian partners to its internal sales kickoff to train alongside Okta’s own sellers – a tangible sign of how central partners are to the go-to-market here. Sydor’s stated ambition is to triple Okta’s Canadian business within two years, backed by the infrastructure and headcount to support it. This conversation pairs well with our recent interview with Okta VP of Product Jack Hirsch on shadow AI and non-human identity – the global product story alongside the Canadian market story. Read Full Transcript Robert Dutt: Hello and welcome to In The Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel community for the last 16 years. I’m Robert Dutt, editor of ChannelBuzz.ca, and your host for the show. Here’s a question I think about a lot. What does it actually mean when a global tech vendor says they’re investing in Canada? Because there’s a spectrum, right? On one end, you’ve got a vendor that sells into Canada from a US office, maybe sends someone up to a conference once a year. On the other end, you’ve got real infrastructure, real headcount, real commitment to treating Canada as a market with its own needs and its own opportunities. Somewhere in the middle is where most vendors actually land. Today I’m talking to Ryan Sydor, the head of Okta Canada. Okta’s been making some pretty significant moves here over the past year or so. They launched a Canadian data cell, they’ve redesigned their Toronto office, and they’ve now got over 600 employees in the country. If you caught our recent conversation with Okta’s Jack Hirsch about shadow AI and non-human identity, think of this as the companion piece. That was the global product story. This is the Canadian market story – what Okta’s building here and what it means for partners. Let’s get into it. My chat with Ryan Sydor. Robert Dutt: Ryan, thanks for taking the time. Ryan Sydor: Good to see you again, Robert. Robert Dutt: You’re in this role heading Canada at a pivotal moment. New office, new data cell in Canada, new channel chief on the global level. When you look at the Canadian market for identity, what’s the picture that you walked into and what’s the mandate that you’ve been given for the Canadian organization? Ryan Sydor: Well, the market obviously has changed, and there’s been a focus in the last six months that has been dominating every conversation. It’s AI. Every conversation we have with a customer or prospect is around AI. There’s a curiosity around it, there’s an urgency, there is uncertainty. Everyone’s trying to figure out how do we use AI to improve our business and at the same time, protect our business and ensure that we’re safe. It’s this balance of the need for cybersecurity, the need to protect your organization. Cybersecurity attacks have increased 200 percent year over year, and it was on a high baseline as it was. Customers are really focused on how do we stay safe and keep our company and our brand safe. At the same time, AI has changed the way we think about running a business in ways I’m not sure companies fully understand yet. How do we leverage innovation to stay ahead of our competition? The opportunity where you can vault ahead, you can really differentiate, create new business streams, create new efficiencies, and do it at the same time that you’re secure. The mandate that we have is not just a Canadian mandate. The mandate is how do we help our customers along that journey, and how do we do it quickly? Because this is all happening fast. It’s an unpaved road in some respects. No one really knows exactly how it’s going to play out, but we understand the value and the benefit and the risks that come with it. We feel at Okta that we’re really well positioned to help our customers, partner with them, and help keep them safe while still allowing them to be innovative. From a Canadian perspective, our goal is how do we partner with our customers and with Canadian businesses, help paint that picture, sit with them on the same side of the table, and put together our plans so that they can innovate and be safe. And from a channel partner perspective, one of the major pillars that we have as an organization this year is to partner. We’re focused on AI, we’re focused on a better methodology of how we approach our customers, and then it’s about being a partner-first organization. What I’ve seen with our new SVP is a stronger alignment with our partners, making sure that these conversations that we’re having, we’re having together. A lot of this is about relationships, it’s about comfort, it’s about trust, and who better to work with than our partner network. Robert Dutt: Sticking with the theme of the Canadian investment, when Okta looks at Canada as a market, are we at the “we need a flag planted here” level, or is there something structurally different about the Canadian opportunity that’s driving the investment at this point? Ryan Sydor: I think it is AI, and it’s our need to partner with organizations. I think it’s also the opportunity that Okta sees. When we invest in the data cell, it opens up the market to companies that we haven’t been able to sell to in the past. The regulated industries, local governments, provincial governments, federal governments. That presents a great opportunity for us as an organization, and it’s a need for these different levels of government. There are regulations that have come out, C-8 and the need to be more focused on cybersecurity. We as the trusted identity company are a good fit at this time with those organizations. Robert Dutt: You touched on the data cell that went live this quarter. For partners and customers who aren’t themselves deep in the identity space, can you explain what that actually is and what it means in practice? What changes for a customer on day one of being on the Canadian cell versus where they were before? Ryan Sydor: It means the data is hosted in Canada. The data cell is in Montreal. We have a failsafe in Calgary. So it means that those companies that need to have their data in Canada, managed by Canadians, now have the opportunity to do so. Robert Dutt: You touched on how that unlocks government and other areas. Can you explain what are the verticals and what types of deals weren’t on the table before but are now? Ryan Sydor: There’s two kinds. First of all, there’s the federal government. There were RFPs that came through that we couldn’t even bid on, because without data residency, you’re not eligible to bid. So it does open up that opportunity. Then there are companies who are making decisions on where they want their data. It’s a decision around regulation, but also it’s a costing question. It’s about what their customers are comfortable with. There have been customers in the past who have asked to be on the EU cell or have chosen to go with other options. Now they have the opportunity to work with Okta with our workforce product and have their data hosted in Canada. Robert Dutt: A few years ago, you were running about 70% of Canadian revenue through partners with a pretty small direct team. Is that still the ratio today, or how has that shifted? Ryan Sydor: The number has increased. I think that number is over 80% from last year. Our direct team has grown a little bit, but the partnership is meant to help really scale the business. I’ll give you an example of how we’ve prioritized partners to help us grow. We actually invested to have partners join us at our sales kickoff this year, where we went through a new sales methodology, and we wanted our partners to be with us so that we could sell together. It wasn’t all our partners, it was a select group of partners. But it was the company demonstrating that as a partner-first organization, we’re now eliminating the silos. We understand the same language, we think about the business the same way, and we think that’s going to be beneficial to our partners, to our customers, and obviously to Okta as well. Robert Dutt: Expanding on that, with Laura Padilla coming in as channel chief globally, she’s talked about doubling down on partners in every geography and driving more toward partner-led markets. From what you’re saying, it sounds like Canada is firmly in that space. What does that mean practically for an MSP or a VAR who’s working with you or potentially working with you? Ryan Sydor: What I hope it means is, one, as we continue to focus on being partner-first, it means that we should be speaking earlier. That’s the first thing we’re trying to do, make sure we’re aligned earlier. We’re investing in programs and processes to make sure that we’re talking to our VARs, that we understand who the relationships are, and make sure we leverage them. And doing that on a consistent basis where we build trust not only with the custome

    17분
  5. ICYMI: SonicWall names the seven deadly sins, Cisco pulls deal reg, and Lenovo bets on services

    4일 전

    ICYMI: SonicWall names the seven deadly sins, Cisco pulls deal reg, and Lenovo bets on services

    Four stories shaping the Canadian IT channel heading into the second week of April. SonicWall’s seven deadly sins SonicWall released its 2026 Cyber Protect Report, reframing SMB security around seven predictable failures: ignoring fundamentals, false confidence, overexposed access, reactive posture, cost-driven deferral, legacy access models, and chasing hype over execution. Key data: 88% of SMB breaches involve ransomware — more than double the enterprise rate. Identity, cloud, and credential compromise account for 85% of actionable security alerts. The average breach goes undetected for 181 days. More on this topic coming in an upcoming In The Channel episode with SonicWall’s Michael Crean. Cisco pulls compute deal registration Cisco eliminated compute deal registration effective immediately, cancelling associated promotional discountsamid rising memory costs. Partners are calling the move out of character, warning of direct margin impact. The latest development in the ongoing hardware cost squeeze affecting vendors across the board. Lenovo 360 bets on services Lenovo updated the Lenovo 360 partner framework with simplified tiers and a new Lenovo 360 for Services pathway launching April 13th, plus a new Tech Connect technical community. ChannelDive frames it plainly: Lenovo is boosting the partner program as a PC sales slowdown looms. The services pivot is the hedge. Canadian cybersecurity data CDW Canada and IDC Canada released the 2026 Canadian Cybersecurity Study based on 700+ Canadian security leaders. Cyberattacks on Canadian enterprises surged nearly 80% year-over-year; enterprise cloud infection rates hit a record 53%. The full study is available at CDW Canada. The report’s “maturity paradox” framing — security investment rising, breach success rising with it — echoes findings from Auvik and OpenText covered in last week’s episode. Read Full Transcript Hello and welcome to In Case You Missed It from ChannelBuzz.ca. I’m Robert Dutt, editor of ChannelBuzz.ca, and this is your weekly look at the stories that matter for the Canadian IT channel community. April 6th, 2026. Four stories this week. SonicWall reframes what security actually means for SMBs. Cisco hits partners in the deal reg. Lenovo bets on services. And some sobering Canadian numbers on the state of cybersecurity. Let’s get into it. SonicWall released its 2026 Cyber Protect Report this week, and the headline is a reframe worth understanding: most SMBs aren’t losing ground to sophisticated attacks. They’re losing ground to seven predictable, preventable failures that SonicWall has named the Seven Deadly Sins of Cybersecurity. Those seven sins: ignoring the fundamentals like authentication and patching; operating with false confidence about your risk level; overexposed access with flat networks and implicit trust; a reactive security posture rather than proactive monitoring; cost-driven security decisions that defer investment until after a breach arrives; reliance on legacy access models like VPNs that authenticate once and trust everything thereafter; and chasing hype over execution — buying tools without actually deploying them properly. The supporting data is striking. SMBs see ransomware involvement in 88% of their breaches, more than double the rate at large enterprises. Identity, cloud, and credential compromise account for 85% of actionable security alerts. The average breach goes undetected for 181 days. The stolen password, not the zero-day, is the attacker’s weapon of choice. The quote from Michael Crean, their vice president of Managed Services,  captures it best: “The danger isn’t that AI isn’t working; it’s that we’re using it as an excuse not to do the things we already know we should.” We’ll go deeper on this with Crean in an upcoming In The Channel episode. Watch for that in the coming weeks. Now for something that hits closer to home — specifically, closer to the margin line. Cisco has eliminated compute deal registration, effective immediately. No more deal reg on compute products, no more associated promotional discounts. The driver, per Cisco, is rising memory costs — the same hardware squeeze we’ve been tracking for weeks. Channel reaction has been blunt. Partners are calling the move out of character for Cisco and warning of lost margins. CRN’s coverage makes clear this is not a minor adjustment — it’s a structural change to how Cisco compute goes to market through the channel. This is the latest domino in the RAMmageddon effect. Memory prices surge, vendors absorb what they can, and eventually the cost lands on partners and customers. Intel and AMD both raised prices last week. Cisco just removed the cushion that was softening the impact for partners. Lenovo’s answer to the same hardware headwind looks quite different. They’ve announced updates to the Lenovo 360 partner framework, with the headline being a new Lenovo 360 for Services pathway launching April 13th. The pitch is straightforward: structured resources and incentives to move partners from transactional hardware deals toward managed and professional services. Given everything we just said about margin compression, that direction makes sense. New additions include a Lenovo 360 Tech Connect technical community and an upgraded partner portal. Not flashy, but this is exactly the kind of structural investment that matters when hardware economics are working against you. ChannelDive’s framing is the honest one: Lenovo is boosting its partner program as a PC sales slowdown looms. If you can’t win on hardware margin right now, services is where the conversation needs to go. We’ll close with some Canadian numbers worth paying attention to. CDW Canada, working with IDC Canada, surveyed more than 700 Canadian security leaders for the 2026 Canadian Cybersecurity Study released this week. The headline: cyberattacks targeting Canadian enterprises surged nearly 80% year-over-year. Enterprise cloud infection rates hit a record high of 53%, up from 41% the prior year. The report calls this a maturity paradox — organizations are investing in security architecture, but breach success rates are climbing anyway. It’s Canadian-specific data, which makes it more immediately applicable than most global threat reports for conversations with clients here at home. That’s your In Case You Missed It for April 6th, 2026. Links to everything we covered are in the show notes at ChannelBuzz.ca. If you’re finding this useful, subscribe on Apple Podcasts, Spotify, YouTube, or wherever you listen. Ratings and reviews always help. I’m Robert Dutt for ChannelBuzz.ca. Have a great week, and I’ll see you in the channel.

    5분
  6. Fortra: building a channel platform from 20-plus acquisitions

    4월 2일

    Fortra: building a channel platform from 20-plus acquisitions

    Faraz Siraj, vice president of global channels and alliances at Fortra Faraz Siraj, vice president of global channels and alliances at Fortra, joins the podcast to talk about what it looks like to build a channel program around a cybersecurity platform assembled through more than 20 acquisitions – and why MSPs should be paying attention now. Fortra’s portfolio spans offensive security tools like Cobalt Strike and Core Impact, data protection through Digital Guardian, and security awareness training via Terra Nova Security. It’s a wide footprint, and as Faraz acknowledges, many partners still know the acquired brands without realizing they’re all under one roof. The Fortra Protect partner program, launched in 2025 with guaranteed margins and a single FortraOne partner agreement, is the company’s answer to the fragmented discount structures and multiple contracts that came with all that M&A. The conversation also digs into Fortra’s recent decision to sell its Alert Logic managed detection and response services to LevelBlue – a deliberate move to position the company as a software provider, not a services competitor to its own partners. Faraz is candid about where offensive security capabilities realistically fit into an MSP’s stack and where they don’t, and offers a practical on-ramp for Canadian partners through Fortra’s acquisitions of Ottawa-based Titus and Montreal-based Terra Nova. Read Full Transcript Robert Dutt: Hello and welcome to In The Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel community for the last 16 years. I’m Robert Dutt, editor of ChannelBuzz.ca and your host for the show. If I say the name Fortra, there’s a decent chance you might not immediately place it. But if I say Cobalt Strike, or Digital Guardian, or Alert Logic, or Titus, especially if you’re in Ottawa, those might ring a bell. Fortra is the company that’s been quietly acquiring cybersecurity companies for the better part of a decade. More than 20 acquisitions in all, and now they’re trying to stitch it all together into a unified platform, pointed squarely at MSPs and MSSPs. What makes this story interesting right now is they’ve recently made some moves that signal where they think they fit into the ecosystem. They sold off their Alert Logic managed services business to LevelBlue, which is a pretty clear statement. We make software, we’re not going to compete with you on service delivery. And they’ve rolled out a new partner program called Fortra Protect with guaranteed margins and a single partner agreement that covers the whole portfolio. My guest today is Faraz Siraj, Fortra’s Vice President of Global Channels and Alliances, and I wanted to talk to you about what it looks like to build a channel program around a platform that was assembled through acquisition, how MSPs should think about the balance between offensive and defensive security capabilities, and whether there’s a Canadian go-to-market story here. Let’s get right into it. My chat with Faraz Siraj. Faraz, thanks for taking the time. I appreciate it. Faraz Siraj: Great to be here. Robert Dutt: Fortra has been built through a bunch of acquisitions. 20+, 25+ I think? For MSPs who know Cobalt Strike or Digital Guardian but don’t necessarily know the umbrella brand of Fortra, what’s the pitch for why they should think of you guys as a platform rather than sort of a collection of tools? Faraz Siraj: Great question. Well, all of these products that we acquired over a, I’d say, a five-year period, it was around a little over 20 companies, we are going to platformization, and all of these will be available via the platform. And the platform provides a variety of tools to manage, and so MSPs would probably want to welcome that opportunity to utilize a single platform with multi-tenancy to help manage those solutions for their customers. It’s just a natural fit, and rather than having multi-screens, multiple interfaces to be able to provide those types of managed services, so it’s a very, very powerful way of bringing it all together. Robert Dutt: For that MSP market, you guys sold off Alert Logic’s managed services business to LevelBlue a couple of months ago. What does that signal to MSPs about where you see Fortra sitting in the ecosystem moving forward, in terms of trying to be a technology brand behind the MSP? Faraz Siraj: Well, that’s a perfect fit. I think we realized that the managed service business is not really what our strong suit is. And we aligned our Alert Logic business with a suitor that can take full advantage of that kind of business, and they’re very good at it. We, over time, realized that if you want to do that business, you have to really focus in on it, whereas we had other priorities. And so what that tells the market and other partners out there is that we need our partners to be able to provide those managed solutions. We truly are in the business of making and providing software. We do not want to be in the services game. We want to have our partners provide those services, whether it is managed services or whether it’s installation services, optimization services delivery, we need our partners to do that. And that’s what creates opportunity. And that’s what I’m really excited about with our platform play, as well as where our future direction is as a company around the products that we provide. Robert Dutt: One of the most interesting things I think you guys talk about is the idea of MSPs balancing offense and defense. And I guess I want to dig into what that actually looks like in terms of the service delivery level. Where does offensive insight realistically show up in the day-to-day stack for an MSP? Faraz Siraj: Well, it shows up everywhere, whether you realize or not. It is in whether it is vulnerability management, it’s in offensive security tooling, it is in pen testing, it is in simulations. That takes some knowledge and ability to provide those services around those capabilities. And that’s just from an offensive side. There is a need for support for those particular product sets. On the defensive side, it’s pretty simple. I mean, we have a lot of those defensive protection products, and we need our partners to be able to provide solutions around it. Robert Dutt: Yeah, and MSPs, most I would dare say at this point, are defensive operators by nature. Prevent, detect, respond, deal with the problem. What can MSPs realistically do with offensive capabilities, and where should they not be trying to operationalize offensive capabilities in their stack? Faraz Siraj: Well, the first thing that I would tell them is be comfortable with what you’re providing. Be comfortable with your capabilities that you can go to your market with, with your customers. If you don’t know it, you can certainly learn, but you don’t want to try to pigeonhole yourself into a technology that you’re unfamiliar with. We can help with that. We have a lot of training. We have a lot of classes available through our Fortra Academy that can help them, and we have onboarding that we can help partners with. Again, it would be, I would think about the customer and work backwards. You would want to qualify the customer and qualify their needs. And if offensive security is something that is a pain point for your customer, then investigate it. And sometimes it’s not. And if it’s not needed, why would you want to venture and invest in an area that you’re unfamiliar with? Now I’d love for all of them to do it, but I’m an honest person. Sometimes it doesn’t make the right business sense. Robert Dutt: You guys acquired Red Macros Factory to enhance Outflank Security Tooling. Cobalt Strike is used by red teams worldwide, but it’s also used by threat actors who are probably using cracked copies. That led Fortra and Microsoft to take joint legal action in the past. How do you talk to partners about selling offensive tools when some of those tools have been weaponized against their customers? Faraz Siraj: It’s a discussion point. It’s also sort of a proof of concept in a twisted sort of way. Well, we do not support any illegal use of our products. We do not support using it for the wrong reasons, so to speak. We have strict legal language on it and we have gone to legal with Microsoft about those kinds of things, because we have strict requirements of how you’re going to utilize this tool. If we find out that you’re using it for the wrong reasons, weaponization, we cut it off. And that’s part of the qualification. And that’s also part of the execution and inspection that we look at. These are very powerful tools and they are not for that purpose. And just as another example is when we provide NFR gear, it’s meant for testing purposes and lab gear. You cannot be utilizing it to provide protection from as a customer standpoint, even though it’s not the same completely. It’s similar. And we just, we have to be very transparent and upfront about what these tools are about and how they’re supposed to be used. Robert Dutt: Let’s talk about the program and what you guys are doing there. You’ve introduced guaranteed margins with Fortra Protect and the FortraOne agreement. What problem were you specifically trying to solve with that model and what was sort of the problem with how partners were engaging with Fortra before? Faraz Siraj: Yeah, there’s several problems that we were addressing and yet we came to an innovative way on how to address it. So let’s look at a little history. When you acquire so many companies, your discount structure is all over the place. In Fortra transparency, we had discounts that were in the low 20s and going way north into the higher discounts. And when partners want to work with you, they expect a certain discount table for all products. And when you’re all over the map, you ca

    19분
  7. Beyond the password vault: 1Password’s channel chief makes the case for identity security as an MSP practice

    4월 1일

    Beyond the password vault: 1Password’s channel chief makes the case for identity security as an MSP practice

    Larissa Crandall, 1Password’s global vice president of channel and alliances 1Password is a company many Canadian partners know, but the Toronto-based firm has evolved well beyond the password vault it’s historically been associated with. Now positioning itself as an identity security company, 1Password recently expanded its global partner program, won the 2025 AWS Canada Rising Star Technology Partner of the Year award, and was named to CRN’s 2026 Security 100 list. The company counts more than 180,000 business customers, with over 75 per cent of its revenue now coming from the enterprise side. Larissa Crandall, 1Password’s global vice president of channel and alliances, joins us to talk about what that evolution means for MSPs looking to build identity security practices. Crandall talks openly about the need to “myth bust” how partners think about 1Password, pointing to strategic integrations with CrowdStrike and Zscaler and the company’s growing presence in AI labs and enterprise security stacks as evidence of the shift. The numbers that emerge are striking. Non-human identities – AI agents, service accounts, API keys – now outnumber human identities 82 to 1, according to Crandall, and SMBs remain largely unprepared for the challenge. That’s the gap MSPs can step into. She shares the story of an MSP that made 1Password mandatory across its entire customer base – not as an add-on, but as a baseline requirement – because you can’t credibly sell identity security if you haven’t secured the front door yourself. On building a profitable practice, Crandall identifies three keys: proper discovery, understanding scope and complexity, and having the right skill sets on your own team before delivering it to clients. Partners interested in learning more can visit the 1Password partner program page. Read Full Transcript Robert Dutt: Hello and welcome to In the Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel community for the last 16 years. I’m Robert Dutt, editor of ChannelBuzz.ca, and as always, your host for the show. If you’ve been following the cybersecurity conversation this year, you’ve probably noticed that identity keeps coming up – not as one item on the security checklist, but increasingly as the item. The attack surface is shifting. SaaS sprawl, shadow AI, and a growing universe of non-human identities – things like AI agents, service accounts, and API keys – are creating access governance challenges that traditional security tools were never designed to handle. And for MSPs, that shift represents both a risk and an opportunity to build a real practice around identity security. 1Password is a company that a lot of us know, but the Toronto-based company has evolved beyond the password vault that many partners may remember. It’s now positioning itself as an Extended Access Management platform, recently expanded its global partner program, and counts more than 180,000 businesses among its customers. Joining me today to talk about what that evolution means for the channel is Larissa Crandall, global vice president of channel and alliances at 1Password. We’re going to dig into why identity has become the front door to the security conversation, what MSPs need to understand about non-human identities before their customers start asking, and what building a profitable identity security practice actually looks like. Larissa, thanks for taking the time. I appreciate it. Larissa Crandall: Thank you so much for having me. Excited for a conversation. Robert Dutt: We keep hearing that identity is the new security perimeter. For a lot of MSPs, the bread and butter is still firewall, endpoint, some MFA. Can you help me with what’s changing in the threat landscape that makes identity security an urgent, a “build a practice around it right now” kind of opportunity? Larissa Crandall: Yeah, absolutely. AI is here to stay. I think the opportunity for MSPs is now. It’s prevalent. We’re seeing a lot of MSPs build practices around identity security, and those are the ones that are getting ahead of it, are leading the charge. I think for us personally, spending a lot of time with MSPs, the attack surface has changed. It’s no longer about human, it’s about non-human identities, and it spans across SaaS applications, endpoints, APIs, service accounts, and AI agents. All of the MSPs that are getting ahead of it are helping our customers and growing. Robert Dutt: You guys have been around for 20 years now or so. I think for a lot of folks, the on-ramp, the familiar place is the personal password vault, of course. Some partners certainly are selling you alongside other tools, are working you into the mix. What would surprise a partner who hasn’t looked closely at 1Password in the last couple of years about where you guys are at right now? Larissa Crandall: Love this question, because I’ve been talking to a lot of partners. As we’ve built out the partner program that we just launched and going to truly partner first, we have to – what I call – myth bust. A lot of how people perceived us is just traditional EPM, the Enterprise Password Manager business, into this true solution that’s attached to everything that they’re already selling. For instance, we have large integrations with CrowdStrike and Zscaler, and that’s getting the attention of some of the partners out there not realizing that we fit into that full conversation and that tech stack as a platform play, versus thinking of us traditionally just on that human-centric credential management play. We’ve definitely flipped the script, I would say, on having sellers think of us different. MSPs – we also have a lot that we’re doing with AWS, and that has changed some of the landscape for us here, is positioning that full technology solution. Robert Dutt: You touch on partner first on the program launch. Can you walk me through what partner first means from a 1Password point of view at this point and the highlights there in terms of what it means to your partner base or your prospective partner base? Larissa Crandall: Sure, absolutely. We built what I call a customer-centric partner strategy. What that means to us internally – and as I’ve shared this with our partner ecosystem – is however a customer wants to transact with us. Via AWS Marketplace, whether they want to work with us with a partner through Marketplace, if they want to work with their traditional reseller and VAR partners out there. We have obviously SMB customers, a lot around working with their MSPs. We have that all taken care of, where we have prescriptive partners across the globe as well as working with our distribution partners. What that means for us internally is we have worked through an entire strategy top-down. It goes from our executives all the way through our sellers that they’re to engage partners. Now it could be an existing account that we have that we’re wanting to bring a partner into. We’re also spending a lot of time with partners, both new and existing, teaching them the 1Password story and teaching them how we fit in what they’re selling today and what the opportunity is. Increased enablement, certifications, all of that. Again, it goes back to what I would say is that myth bust of how you think of us and what we’re doing, versus how we’re getting a lot of attention from partners that have talked with us previous but are seeing us different, talking about putting us in their AI labs and their security practices and a full wrapper into platform. Robert Dutt: That’s two fronts of myth busting, or developing the stories to partners. Where would you say you’re at in getting that out there, broadly disseminated and well understood on both of those fronts? Larissa Crandall: It’s a daily, right? I think it’s a daily spend. I spent this morning talking to two partners and they were both new. They were in a region that we have not spoken to before, and it was newer partners wanting to learn more because they’re hearing the market demand and they’re having customers call about 1Password and identity security. That has flipped as well, where identity security is no longer a “it’s a nice” – it’s needed. Same thing across MSPs. They’re building foundational practices as well around identity security and we’re having them come to us and say, “Teach us more. How do we build this? How do we do the discovery and how do we get in front of it?” Especially around AI. Robert Dutt: You’ve talked about something you call the Access-Trust Gap – the space between what IT can see and control versus what employees are actually using to get their work done. Can you walk us through what that looks like in a real organization and the why as to why traditional IAM tools aren’t closing that gap? Larissa Crandall: I have an example for you that I love to use, and it’s related to an MSP that we have that shared with us how they personally worked with 1Password. It’s a mature MSP that made a deliberate decision as a company to bring in 1Password and make it mandatory for all of their customers. Not an add-on – make it mandatory for all. They did that because they wanted to ensure that security was embedded into everything they did from the start and how they interacted with customers. The reason that they did that is they wanted to make sure – if they weren’t ahead of it and they weren’t giving customers a secure way to manage their credentials, they would find their own way. That’s the problem still. There’s spreadsheets, there’s shared sticky notes. You put it in your phone. That’s never good. This MSP shared that and said, “If we’re going to go preach this and sell 1Password, we’re going to basically do it ourselves.” If you leave it up to your own devices, employees will do it on their own and that’s the

    21분
  8. WatchGuard CEO Joe Smolarski on doubling MSP margins, the Kaseya playbook, and why Canada’s cybersecurity moment is now

    3월 31일

    WatchGuard CEO Joe Smolarski on doubling MSP margins, the Kaseya playbook, and why Canada’s cybersecurity moment is now

    Joe Smolarski, CEO of WatchGuard Technologies, joins the podcast for a wide-ranging conversation about why the company believes 2026 is “the year of the cybersecurity-focused MSP” – and what that actually means beyond the tagline. Smolarski came to WatchGuard in November after nearly a decade at Kaseya, where he served as president and COO. He’s been open about applying what he calls the “Kaseya playbook” to WatchGuard – driving down platform costs and consolidating tools to improve partner margins. In this conversation, we dig into what parts of that playbook he’s bringing, what he’s leaving behind, and why he believes WatchGuard can double MSP margins on cybersecurity. We also explore WatchGuard’s latest threat research, which showed a 1,500% spike in unique endpoint malware, and what the company’s 2026 predictions – including the first fully autonomous AI-executed cyberattack and the extinction of crypto-ransomware – mean practically for MSPs and the customers they protect. The conversation takes a Canadian lens as well. Smolarski discusses WatchGuard’s new partnership with Bell Cyber, the data sovereignty investments required to win that deal, and why he sees the Canadian market as ripe for its next level of MSP maturity – driven by regulation like Bill C-26 and the consolidation wave now reaching this side of the border. We also touch on WatchGuard’s 30th anniversary, what longevity means in a market full of startups and PE roll-ups, and how Vector Capital’s decades-long involvement shapes the company’s outlook. Read Full Transcript Robert Dutt: Hello and welcome to In The Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel community for the last 16 years. I’m Robert Dutt, editor of ChannelBuzz.ca and your host for the show. My guest this week is Joe Smolarski, the CEO of WatchGuard Technologies. Joe took the helm at WatchGuard back in November after spending nearly a decade at Kaseya, where he served as president and COO. He’s now leading a company that just celebrated its 30th anniversary, has been 100% channel-focused since day one, and is making a pretty bold claim that 2026 is the year of the cybersecurity-focused MSP. Now, that’s the kind of line that can sound like vendor marketing if you’re not careful, so I wanted to dig into what’s actually behind it. We talked about the explosion in endpoint malware, why the shift from ransomware to pure data extortion changes the game for MSPs, what Joe is bringing from his Kaseya experience and what he’s leaving behind, and why he thinks Canadian MSPs are at a tipping point. We also get into the economics of it all – his promise to double MSP margins on cybersecurity, and how WatchGuard’s platform play is supposed to make that math work. Let’s get right into it. My chat with Joe Smolarski. Thanks for taking the time, I appreciate it. Joe Smolarski: My pleasure, Rob. Robert Dutt: Security has been one of the biggest, maybe the biggest, growth driver for MSPs for years, and your company is saying that 2026 is the year of the cybersecurity-focused MSP. Help me understand what makes this year different from the last three or four, where people have been seeing the same kind of momentum in security in the MSP space. Joe Smolarski: Yeah, sure, Rob. I think ultimately many of the stats are clear, and they’re really eye-opening. I think no longer are MSPs having to educate and evangelize why it’s needed, because when you see eye-popping stats like the fact that cybercrime is the third largest GDP in the world behind the US and China, it’s like, holy cow, how the heck is that possible? But it’s escalated very, very quickly. And unfortunately for SMBs, SMBs have become the focus of those attacks, and I think that’s becoming clearer and clearer every day. SMBs used to feel as though they’re not the focus, that the big guys will be the focus. But what we’ve seen – and unfortunately I have some firsthand experience – is that when cybercriminals attack the big guys, they have people come after them. If you know my past, I served as president and COO of Kaseya for nearly a decade prior to becoming CEO at WatchGuard. And there, on July 2nd of 2021, we got attacked by Russian cybercriminals. When that occurred, within four hours I had the FBI and the White House and Department of Homeland Security and everybody else in my office, which was not very pleasant. So you get the attention when you’re a major provider, a big company. Look at Stryker right now, what they’re going through. In that situation, within four hours, they’re all in my office. Within three weeks, we got the bad guys, and those bad guys are sitting in a federal prison right now. But that’s not the case when it comes to SMBs, and it’s a shame. I had access to a bunch of inside information within the government when we went through that, because we also hired the FBI lead as our CISO at that time. And what they say is they’re just overwhelmed. There’s no way that they could get to all of the attacks that are occurring. The big guys get attention and the small guys don’t, and that’s become prevalent. So I think ultimately, this is the year for cybersecurity to get to that next level because the pace of attacks is picking up so much, in particular in the SMB market. We posted our bi-annual security report and showed a 1,500% increase over the last year, just in the velocity of attacks, which is scary. It’s scary for SMBs. And quite frankly, even if they have some of their own internal IT staff, they’re not going to be at the level that they require to stay protected. So they’re relying on the fantastic MSPs that are out there to get them to that next level. I will say, I caught up with three or four large MSPs in Canada over the last week, just to prepare for this a little bit, just to get some of the latest trends directly from the MSPs themselves. And they said they still feel like Canada is a little bit behind when it comes to the US, just a little bit behind in terms of education and things like that. And certainly, small business is so prevalent in Canada, given how dispersed it is. So they’re working on that. I know your government in Canada is working to increase regulation. I think some of the fighting back and forth with Trump and Carney has been interesting and ultimately fueling the Buy Canadian campaigns and some of that stuff. But you’ve got a lot going on. I know you’ve got a C-26 bill from an infrastructure perspective trying to be passed, just to make sure that the awareness is there for all businesses on what needs to be protected – supply chain and everything else. But it’s a huge opportunity for the MSP market to take it to that next level, because from my perspective, Rob, you have to. What I’ve seen – and this is very, very unfair – is that when a small business even declines that next level of, say, platinum service from an MSP, they’re like, “I don’t need that. We don’t need that level of protection. We’re not willing to pay that amount.” If something negative happens, then unfortunately the MSP still gets blamed. And that’s ridiculous, but it’s the reality of the situation. So this is the year to capitalize on it. There’s enough news and information out there that supports everything. It’s an exciting year and, of course, a nervous year, because you’ve got to protect your clients and use the best technology and services to get there. Robert Dutt: You touch on the 1,500% spike in endpoint malware in the second half. A quarter of those attacks are evading signature-based detection. At the same time, though, your team is predicting that crypto-ransomware is essentially going extinct this year as attackers say, “You know what? We’d rather just steal the data and extort you.” What does that shift mean practically for how MSPs need to think about protection and what they’ve been offering, given that ransomware has been such a driver for the last half decade or so? Joe Smolarski: Yeah, I think ultimately you just have to make sure that you have layers of protection. To your point, lots of things get through. You could have the very best technology in the world, whether that’s WatchGuard or some of the other leading providers, and things can get through. Ultimately, that’s why you need the layers. One of the things that you should also consider is the platform approach. There are many providers, WatchGuard being one of the leading providers in the MSP space. When you have a platform that gives you multiple layers and those layers get to be correlated together, it just increases your chances of detecting those things. You may see something on the firewall that’s not definitive evidence of something happening, but when you piece that together with what’s happening on the endpoint and you’ve got those two data points, you piece it together faster than point solutions can. I think ultimately you need to make sure you have 24/7 SOC monitoring. Things that you didn’t think were possible – you thought you put in the best products to protect you, why do I need that, nothing should get through. You just threw the stats out there that things do get through. The only way to stop that is to catch those anomalies at one of the respective layers. If you’re at 99.9999%, you’ll get it at the product level. But what gets through – and with the velocity of attacks that is there – you’ve got to make sure you’ve got AI-based SOC solutions and MDR solutions backed up by great security professionals to ensure you’re protected. Robert Dutt: On the AI tip, you guys have predicted the first fully autonomous, end-to-end executed-by-AI cyberattack this year. That’s a big call. What would that look like? And how do I, as a mid-market MSP, even begin to prepare for something like that? Joe Smol

    35분

소개

Cutting through the noise for Canadian VARs and MSPs