An MSP Success Story 

TechGuard Solutions (renamed to protect their privacy) is a leading Managed Service Provider that has always prioritized the security of their clients’ IT environments. Recently, the stakes were raised when their cyber insurance premiums rates they offered their customers were directly tied to the security performance of their client accounts. The more breaches their clients experienced, the higher the insurance costs for TechGuard. This financial incentive emphasizes the critical need to reduce their clients’ risk as much as possible.

Specializing in providing comprehensive managed services to a diverse clientele ranging from SMBs to large enterprises, TechGuard Solutions prides itself on staying ahead of the curve when it comes to cybersecurity. In recent years, they recognized an alarming trend highlighted in reports such as the Verizon Data Breach Investigations Report (DBIR) and IBM’s Cost of a Data Breach Report: compromised credentials were consistently identified as the top cause of data breaches. Despite widespread adoption of Multi-Factor Authentication, this threat vector was still the largest risk.

An MSP Cybersecurity Challenge

TechGuard Solutions faced the challenge of strengthening their security service stack to address the persistent threat of compromised credentials.

• Their clients were increasingly concerned about account takeover attacks and data breaches, particularly those stemming from weak, reused, or exposed passwords.
• The MSP’s existing security measures, which included MFA, were insufficient to mitigate the risk posed by compromised credentials.

Compromised Credential Solution for MSPs

In their quest for an MSP-friendly solution, TechGuard Solutions discovered Enzoic for Active Directory.

• Enzoic provides a cutting-edge approach to password security by continuously monitoring user credentials against a constantly updated database of compromised credentials exposed on the Dark Web.
• The “set and forget” nature of Enzoic’s solution, which offers automated remediation with one-click configuration, was particularly appealing. It promised a significant enhancement to their security posture with minimal administrative overhead.

Implementation

TechGuard Solutions began the rollout of Enzoic for Active Directory across their client base. The implementation process involved several key stages, each critical to ensuring a seamless integration and optimal protection. Deployment was executed across multiple customer environments. The deployment process was seamless, thanks to Enzoic’s compatibility with existing Active Directory infrastructures, which minimized disruption to the clients’ operations.

Whether the client needed to comply with standards such as NIST, HITRUST, or NCSC, or had specific security preferences, TechGuard Solutions configured policies to ensure optimal protection. These policies covered password strength criteria, the frequency of credential checks, and automated remediation actions for compromised passwords, ensuring each client’s unique security needs were addressed.

By incorporating Enzoic for Active Directory into their managed security services, TechGuard Solutions was able to significantly enhance their clients’ security posture.

One of the most compelling benefits was the continuous monitoring and automated remediation of compromised credentials. This proactive approach ensured that compromised passwords were promptly identified and changed, mitigating the risk of data breaches.

For clients operating in highly regulated industries, Enzoic’s detailed reporting capabilities were invaluable. These reports and audit logs helped clients meet compliance requirements and demonstrate their commitment to cybersecurity best practices. Moreover, the solution’s one-click compliance with challenging standards like NIST, HITRUST, and others enabled their customers to successfully pass audits.

The “set and forget” nature of Enzoic proved to be a major advantage, reducing the administrative overhead for both TechGuard Solutions and their clients. Once the security policies were configured, minimal intervention was needed, allowing the MSP to allocate their resources more effectively and focus on other critical aspects of their service offerings.

Despite the widespread implementation of MFA, compromised credentials remained a significant threat. Enzoic for Active Directory provided an additional layer of security, ensuring that even if MFA was bypassed or not used, the risk of a breach was minimized. This additional protection complemented the existing MFA systems, creating a more robust security framework.

The proactive approach to securing their customers’ environments led to increased satisfaction and trust. Clients appreciated the enhanced security measures and the transparency provided by TechGuard Solutions. This not only improved client retention rates but also attracted new business through positive word-of-mouth and referrals.

MSP Success

One of TechGuard Solutions’ major clients, a large financial services firm, experienced a significant security incident prior to the implementation of Enzoic for Active Directory. An attacker had gained access to their network using compromised credentials obtained from a previous data breach. Although the firm had implemented MFA, the attacker managed to exploit a vulnerability in their MFA implementation, leading to unauthorized access and a subsequent data breach. Since the attacker logged in rather than hacking in, the data exfiltration went undetected by EDR and other telemetry-based solutions.

The incident resulted in substantial financial loss and reputational damage. Determined to prevent a recurrence, the firm turned to TechGuard Solutions for their attention to preventing users from using compromised credentials. TechGuard Solutions recommended and implemented Enzoic for Active Directory, which transformed the firm’s approach to password security.

Since deploying Enzoic, the firm has not experienced any incidents involving compromised credentials. The continuous monitoring and automated remediation have ensured that any exposed passwords are immediately flagged and changed. This has significantly enhanced the firm’s security posture, providing peace of mind to both the IT team and executive management. Additionally, Enzoic’s central portal for MSPs allows easy export of data, including the number of compromised passwords remediated, which TechGuard regularly uses to demonstrate the value they provide to their customers.

The financial services firm operates in a highly regulated industry and must comply with stringent data protection regulations. Enzoic’s detailed reporting capabilities have simplified compliance audits and reduced the burden on the firm’s IT and compliance teams. The ability to provide auditors with comprehensive reports and audit logs has been a major benefit, demonstrating the firm’s commitment to cybersecurity best practices.

The “set and forget” nature of Enzoic allowed the firm’s IT department to focus on other critical tasks. The reduction in administrative overhead freed up resources that were previously dedicated to manual password management and monitoring. This optimization of resources has been a significant advantage, allowing the IT team to focus on strategic initiatives that drive business growth.

Following the implementation, the firm’s clients and partners gained renewed confidence in their security measures. The proactive stance on password security contributed to rebuilding the firm’s reputation and trust. This enhanced trust and reputation have been critical in maintaining strong relationships with clients and partners, as well as attracting new business opportunities.

By preventing further data breaches, the firm successfully regained the trust of the market and gained more customer than they lost immediately after their breach. The investment in Enzoic for Active Directory proved to be cost-effective, offering a high return on investment. The financial savings and enhanced security posture have been significant benefits, justifying the decision to implement Enzoic.

Key Takeaways

Since implementing Enzoic, TechGuard Solutions has observed zero data breaches across their client base, a remarkable achievement that shows the effectiveness of securing credentials. This success has bolstered their reputation and secured them favorable cyber insurance rates for their customers while improving client satisfaction. TechGuard Solutions continues to advocate for the adoption of Enzoic for Active Directory across their customer base. The “set and forget” functionality, combined with automated remediation, ensures that password security is maintained without imposing additional burdens on IT teams. By integrating Enzoic into their security service stack, TechGuard Solutions has reinforced their reputation as a forward-thinking MSP dedicated to protecting their clients’ IT environments from the top cause of a data breach.

Learn more about partnering with Enzoic.

 

Download Case Study