Symbol Security

NOW HIRING: Senior Portal Tab Wrangler 💼 Symbol Security is not actually hiring this person. But half the MSPs we talk to have accidentally created the role. THE ROLE: Log into 14 client portals before 9 AM. Re-run the same training report by hand for the eighth time this month. Rebuild the same phishing-sim schedule with a different logo on top. Chase the one client whose users still have not finished the "annual" video from January. REQUIREMENTS: - High tolerance for repetitive keystrokes - Ability to describe manual admin as "recurring value" with a straight face - Must never ask what the margin on any of this actually is COMPENSATION: Your evenings. Your techs' Tuesdays. And the profit that quietly leaks out of a service line nobody ever costed. If that posting hit a little close, here is the good news: it does not have to be a job at all. Our co-founder Craig Sandman is running a live session later this month on turning the training line from an admin sink into a 70%+ margin business. For now, tag your Senior Portal Tab Wrangler. They have earned the shout-out. Oh and link in the comments to sign up if that sounds interesting to you. #MSP #CyberSecurity #ManagedServices

Most security awareness training does not work, and everyone in the channel quietly knows it. The classic version is a 45-minute video, once a year, that a client's staff click through at 2x speed while doing three other things. It checks a compliance box. It changes almost nothing. Six months later the same people click the same phishing email. That is the reputation the whole category earned, and it is exactly why so many MSPs treat training as a throwaway line. If the product does not work, it is hard to charge real money for it or feel good selling it. But the version that actually works looks nothing like that. - 𝐒𝐡𝐨𝐫𝐭, 𝐬𝐨 𝐩𝐞𝐨𝐩𝐥𝐞 𝐟𝐢𝐧𝐢𝐬𝐡 𝐢𝐭: Our completion rates run 87% against a 23% industry average, because three to five minutes a month beats forty-five minutes a year. - 𝐂𝐨𝐧𝐭𝐢𝐧𝐮𝐨𝐮𝐬: So the behavior holds instead of fading by March. - 𝐌𝐞𝐚𝐬𝐮𝐫𝐞𝐝: So you can show a client their phishing click rate trending down instead of just telling them the training happened. Build it that way and training stops being a checkbox. It becomes the most improvable security control a client has, and the one they can actually feel working. That is when it earns the right to be priced like a real service instead of a line you apologize for. For the MSPs here: when a client's people finish a training module, do you see their behavior change, or do you just see a completion report? #MSP #CyberSecurity #vCISO #ManagedServices

Have you prepared your users for the scams that don't look like scams anymore? Training used to assume attackers would slip up — bad spelling, suspicious senders, obvious red flags. That assumption is gone. A voice can be cloned from a few minutes of audio. A face can be recreated from public footage. The scams that were once easy to spot now require users to know exactly what to look for. That's the reality organizations are operating in today. That's why this month's Security Awareness Calendar focuses on Social Engineering, with resources including: • Spotting the Signs — a practical guide to recognizing common warning signs • Deepfake Defense Essentials • Real-world examples of social engineering attacks • Short video training sessions for ongoing awareness Spotting deception is a skill. Give your users the resources they need to strengthen that skill while reinforcing a stronger security culture across your organization. Grab this month's calendar: https://lnkd.in/eG7wxB8q #SocialEngineering #DeepfakeDefense #MSP #SecurityAwareness #NISTCompliance #vCISO

Somewhere along the way, security awareness training became the salad of the MSP service stack. 🥗 It is on every menu. Everyone agrees clients should have it. And nobody is making as much money on it as they should. Most MSP owners aren't maximizing their margins and profits from of their security awareness training product. Too many MSPs view it as a product they have to offer in order to unlock more higher-margin upsell opportunities from their customers. But what if we told you security awareness training can be that high margin product from the get go? So here is the uncomfortable Friday question, no pitch attached: is your training line priced like a managed program, or like a gym membership you are hoping nobody cancels? Reply with the honest answer. We will not tell your account manager. Oh and we're hosting a webinar on July 29th on how you can earn 70% margins on your SAT. Sound interesting? Link in the comments. #MSP #CyberSecurity #ManagedServices #SecurityAwarenessTraining

Security awareness training might be the most underrated product an MSP sells. It is one of the highest-impact things you can do for a client, and one of the highest-margin things you can put on an invoice. Most MSPs aren't maximizing either lever. Start with impact. The majority of breaches trace back to a person, not a firewall. That makes the human layer the single most improvable risk surface a client has. Done right, training moves real behavior, not just a compliance checkbox. Our customers see a 71% drop in phishing click rates. That is not a slide. That is fewer 2 AM incident calls. Now the margin. Because it is low-delivery-cost, recurring, and sticky, security training should be one of the best-margin lines an MSP runs. Instead most owners resell a license at a thin markup and never look at it again. So you have a service that is genuinely valuable to the client and genuinely profitable to deliver, sitting underpriced and underused on most MSP menus. High impact and high margin almost never live in the same line. This one does. I have spent seven years figuring out how the best MSPs turn that into a real program instead of a throwaway add-on. On July 29th I'm going to lay the whole framework out over the course of an hour. For the owners here: if you graded your own security training offer today, on impact and on margin, what would you give it? #MSP #CyberSecurity #ManagedServices #vCISO

What if every table showed only the information you need? The data you need is already there. Now you can decide what and how to view it. Admins work with large datasets every day, but not every column is relevant to every task. Too much information on screen can make it harder to focus on what matters. With our new table management experience, you can: • Choose which columns to display • Reorder columns to match your workflow • Save your preferred layout automatically • Enjoy a cleaner, more consistent design Customize your table views now. https://lnkd.in/gt3kyA_B #MSP #vCISO #ITAdmin #Cybersecurity #TableViews

Have you ever discovered a phishing attempt only after someone had already responded to it? By the time you find out, it's not prevention anymore. Credentials may already be compromised, and the account is already flagged. One click is all it takes to turn an ordinary Tuesday into an incident response exercise. Waiting for that click to happen isn't a security strategy. This month in our Security Awareness Calendar, we're reinforcing NIST PR.AT-2 and Social Engineering, with: - Real-world examples that help users recognize social engineering tactics - Understanding Social Engineering guide + Spotting the Signs breakdown - Short video training on Deepfake Defense Essentials for next-gen scams This month focuses on Social Engineering. Five more months, five more opportunities to build stronger security habits across your organization. Grab this month's calendar and see what the rest of the year covers. https://lnkd.in/eG7wxB8q #SecurityAwareness #SocialEngineering #vCISO #NISTCompliance #RiskManagement #MSP #ITAdmins

We train people to question strange emails. But do we train them to question a phone call just as carefully? That was the situation a finance employee in Hong Kong found himself in. He joined a video call with his CFO and several familiar colleagues. The instruction: transfer $25 million for a confidential acquisition. Everyone on that call was real to him. Voices he recognized. Faces he'd seen in meetings before. Every single one, except him, was an AI-generated deepfake. AI can now clone tone, pace, and cadence well enough to fool people who've known the real voice for years. If a voice or a face is no longer proof, what is? This month's 2026 NIST Security Awareness Calendar covers Social Engineering — what verification looks like when sight and sound can be faked. Inside: 📌 A guide to social engineering tactics, including deepfakes 📌 Deepfake Defense Essentials for every employee 📌 A detection guide built specifically for finance teams handling payment requests 📥 Explore this month's full resource pack — https://lnkd.in/eG7wxB8q #SocialEngineering #DeepfakeDetection #SecurityAwareness #vCISO #MSP #NIST

Did you know you can temporarily pause a user's access without losing any of their training history? For LOAs, seasonal staff, and temporary contractors, pausing is the smarter move — it restricts access while keeping your reporting accurate and your data reliable. Tomorrow at Admin Open Mic, Carlos is covering this and other user hygiene issues that might quietly chip away at your reporting integrity. 📅 Friday, June 26 | 12:00 PM EST | Microsoft Teams What we're covering: - Pause vs. Remove: preserve historical data without disrupting reporting continuity - Google Workspace integration: sync users automatically and manage groups in bulk - Bounces & blocks: understand the difference and remediate delivery issues for full simulation reach - Proactive maintenance: automate hygiene checks and keep your metrics trustworthy Got a specific user management issue you've been dealing with? Bring it. Want in? DM me for the session link. #MSP #CyberSecurity #SymbolSecurity #MSSP #ITAdmin #SecurityAwareness

Your phishing simulations might be running without errors and still missing inboxes. When a simulation email gets blocked, not bounced, it won't flag as a failed send. It'll just quietly not land. And unless you know where to look, your reporting will appear cleaner than it actually is. This Friday, we are covering this and three other user hygiene issues live. Admin Open Mic: Operational Efficiency & Reporting Integrity 📅 Friday, June 26 | 12:00 PM EST | Microsoft Teams On the agenda: the updated Google Workspace roster sync, blocked vs. bounced email remediation, pause vs. remove decisions that affect your historical data permanently, and Auto-Approve configuration for M365. Live Q&A at the end, bring your questions. Symbol Security admin? DM us here for the session link. #MSP #MSSP #ITAdmin #CyberSecurity #SecurityAwareness #SymbolSecurity