#securitypovertyline — Public Fediverse posts

One of my clients recently requested I do a security audit of an associated but independent side org.

There’s only 3 users and apparently an on-prem #exchange server. (They didn’t even know that’s what the computer in the corner of their office was.)
Their #wordpress is unpatched.
Security has never been something they’ve even spent 10 seconds thinking about.

The SMBs I take on as clients, often aren’t even doing any attempt at #defenseindepth until I’ve run through their stuff. Small Non-profits like this example are even worse off. MFA? yeah right. Password managers? you must be high.

There has to be a better way to serve these small orgs that’s not snake oil, and help them put up a solid defense somewhere above the #SecurityPovertyLine.
/rant