https://www.channelfutures.com/wp-content/themes/channelfutures_child/assets/images/logo/footer-new-logo.png
  • Home
  • Technologies
    • Back
    • SDN/SD-WAN
    • Cloud
    • RMM/PSA
    • Security
    • Telephony/UC/Collaboration
    • Cable
    • Mobility & Wireless
    • Fiber/Ethernet
    • Data Centers
    • Backup & Disaster Recovery
    • IoT
    • Desktop
    • Artificial Intelligence
    • Analytics
  • Strategy
    • Back
    • Mergers and Acquisitions
    • Channel Research
    • Business Models
    • Distribution
    • Tech Services Brokerages
    • Sales & Marketing
    • Best Practices
    • Vertical Markets
    • Regulation & Compliance
    • Diversity, Equity & Inclusion
  • MSP 501
    • Back
    • MSP 501 Information Center
    • 2021 MSP 501 Rankings
  • Intelligence
    • Back
    • Galleries
    • Podcasts
    • From the Industry
    • Reports/Digital Issues
    • Webinars
    • White Papers
  • Channel Futures TV
  • EMEA
  • Channel Chatter
    • Back
    • People on the Move
    • New/Changing Channel Programs
    • New Products & Services
    • Industry Honors
  • Resources
    • Back
    • Advisory Boards
    • Industry Organizations
    • Our Sponsors
    • Advertise
    • 2022 Editorial Calendar
  • Awards
    • Back
    • 2021 MSP 501
    • Circle of Excellence
    • DE&I 101
    • Top Gun 51
    • Channel Partners 101 (CP 101)
  • Events
    • Back
    • CP Conference & Expo
    • MSP Summit
    • Channel Partners Europe
    • Channel Partners Event Coverage
    • Webinars
    • Industry Events
  • About Us
  • DE&I
Channel Futures
  • NEWSLETTER
  • Home
  • Technologies
    • Back
    • SDN/SD-WAN
    • Cloud
    • RMM/PSA
    • Security
    • Telephony/UC/Collaboration
    • Cable
    • Mobility & Wireless
    • Fiber/Ethernet
    • Data Centers
    • Backup & Disaster Recovery
    • IoT
    • Desktop
    • Artificial Intelligence
    • Analytics
  • Strategy
    • Back
    • Mergers and Acquisitions
    • Channel Research
    • Business Models
    • Distribution
    • Tech Services Brokerages
    • Sales & Marketing
    • Best Practices
    • Vertical Markets
    • Regulation & Compliance
    • Diversity, Equity & Inclusion
  • MSP 501
    • Back
    • MSP 501 Information Center
    • 2021 MSP 501 Rankings
  • Intelligence
    • Back
    • Galleries
    • Podcasts
    • From the Industry
    • Reports/Digital Issues
    • Webinars
    • White Papers
  • Channel Futures TV
  • EMEA
  • Channel Chatter
    • Back
    • People on the Move
    • New/Changing Channel Programs
    • New Products & Services
    • Industry Honors
  • Resources
    • Back
    • Advisory Boards
    • Industry Organizations
    • Our Sponsors
    • Advertise
    • 2022 Editorial Calendar
  • Awards
    • Back
    • 2021 MSP 501
    • Circle of Excellence
    • DE&I 101
    • Top Gun 51
    • Channel Partners 101 (CP 101)
  • Events
    • Back
    • CP Conference & Expo
    • MSP Summit
    • Channel Partners Europe
    • Channel Partners Event Coverage
    • Webinars
    • Industry Events
  • About Us
  • DE&I
    • Newsletter
  • REGISTER
  • MSPs
  • VARs / SIs
  • Agents
  • Cloud Service Providers
  • Channel Partners Events
 Channel Futures

Channel Partners Event Coverage


Danny Jenkins ThreatLocker MSP Summit 2022

ThreatLocker: Zero Trust Focuses on Control to Keep Cyber Threats Out

  • Written by Edward Gately
  • April 11, 2022
Achieving controls is no longer archaic or difficult.

CHANNEL PARTNERS CONFERENCE & EXPO/MSP SUMMIT, LAS VEGAS — The most effective cybersecurity strategy is zero trust, focusing on control as opposed to only on entry points and threat detection.

That’s according to Danny Jenkins, ThreatLocker‘s CEO. His MSP Summit keynote on Monday focused on zero-trust applications with ThreatLocker.

“Controls are absolutes,” he said. “They’re things you can control. Dual-factor authentication is an absolute. If your user clicks on that phishing link, and the email or the web filtering lets it through, dual-factor authentication saves your backside. Whitelisting, ringfencing, these are controls. If you block all software that you don’t trust, you have control over this. That’s what’s going to save you when everything else fails.”

Last year, attacks on SolarWinds, Kaseya and Microsoft Exchange proved the increasing sophistication of organized crime gangs’ tactics, Jenkins said.

“When you think about how you need to defend yourself from today’s cyber threats, what are they?” he said. “They are businesses with quotas and organization, and planning and support who are trying to get into your company to steal your data to encrypt your files. And they’re not just trying to get into large companies. They’re trying to get into small businesses, dental offices, MSPs and car dealerships. They’re going after everybody with the same intent. And they’re going after different departments and different layers.”

Last year, there were over 21,000 critical vulnerabilities and exposures (CVEs) created for vulnerable pieces of software, Jenkins said.

A Better Approach

What organizations are doing to protect themselves is essentially the same as what’s been done over the last 20 years, Jenkins said.

“A better approach is rather than trying to block everything that’s bad, allow only what’s good,” he said. “Here’s a definition of zero trust that was pulled from the White House executive order, it’s probably the clearest definition I could find. A zero-trust security model eliminates implicit trust in any one element, node or service, essentially only giving the bare minimum required to do their job. Now we’re not just talking about people. We’re talking about services, applications and networks. Take away access where it’s not required. It means least privilege. For us, what that means is block any software that isn’t trusted. So just allow what you need … and block everything else. If somebody manages to get into your file, it cannot run.”

Achieving zero trust control used to be archaic and difficult, Jenkins said.

“Now you just deploy an agent,” he said. “You can do it through your remote monitoring and management (RMM). It will map your clients for you. It will learn everything that’s running on their machine and after about a week of learning it creates a list of policies. We jump on a call with you and review that list of policies and we simulate what would happen if you were locked down, which is surprisingly very little because people don’t generally open things they don’t need. If the applications update, we track them for you so it’s very simple.”

Extending Controls

ThreatLocker has extended its zero-trust control technologies from application control to ringfencing, storage, elevation and network controls, Jenkins said.

“Someone says to me security is about layers,” he said. “It’s like an onion; it’s sour, but it’s not really layers in the way we think. People often say layers in that I’ve got web security, email security and endpoint security. Well, they’re entry points, and if you put an antivirus on all three, it’s going to do the same thing on all three. That’s doing the same thing three times. If you think about security as angles, you put yourself in a better position. If I send malware or phishing email to everyone in this room, if you don’t open it, the threat’s gone, the problem’s gone away. However, you can’t control what your users do. You can hope and train them, and you can reduce your risk, but it’s not a guarantee.”

The next way is detection, Jenkins said.

“I’m not saying in any way you shouldn’t use detection because absolutely you should use detection,” he said. “You’ve got an antivirus, you’ve got extended detection and response (EDR), you’ve got threat hunting and a security operations center (SOC). All of these are looking for potential bad behavior based on profiles or …. whatever buzzword you want to call it today. Again, you have no control over this. Go off and buy a good EDR and hope it does the best, but you don’t have any real control whether it allows today’s malware or not.”

Want to contact the author directly about this story? Have ideas for a follow-up article? Email Edward Gately or connect with him on LinkedIn.
Tags: MSPs Best Practices Channel Partners Event Coverage Cloud Security Strategy

Most Recent


  • Sophos tip
    Microsoft Global Channel Chief Rodney Clark Makes Sudden Exit
    The unexpected departure takes place just one year after Clark took over the position.
  • Managed Security Services
    Palo Alto Networks, Deloitte Offering Managed Security Services
    Deloitte Cyber and Palo Alto Networks announced their strategic alliance last July.
  • Mergers and Acquisitions, MA
    11:11 Systems Snags Key Managed Service and Cloud Infrastructure Assets
    The two acquisitions add value to 11:11's cloud, connectivity and security platform and portfolio
  • North America
    Kaspersky Channel Vet Joins Cyware to Lead its North America Channel
    Cyware partners can expect improvements in the company's partner program.

Leave a comment Cancel reply

-or-

Log in with your Channel Futures account

Alternatively, post a comment by completing the form below:

Your email address will not be published. Required fields are marked *

Related Content

  • Empowering Women Leaders Panel at CPLV 2022
    Top Moments from the Record-Smashing Channel Partners Conference & Expo
  • Eric Townsend Intel CP Expo 2022
    Intel Exec: Most MSPs Are Responding to Customer Ransomware Attacks
  • MSPs What's Next CP Expo 2022
    MSPs Consider What’s Next as M&A, Talent Shortage, More, Impact Them
  • Cloud Growth
    Rackspace Channel Execs: TSBs, Agents Key to Managed Cloud Growth

Upcoming Events

View all

Channel Partners Europe

June 14, 2022 - June 15, 2022

MSP Summit

September 13, 2022 - September 16, 2022

Galleries

View all

Unprecedented Times Impacting Cybersecurity Channel Partners

May 16, 2022

8 Channel People Making Waves This Week at Avant, Cisco, Databricks, More

May 13, 2022

Talent Shortage Ripple Effects Continue to Create Headaches for Partners

May 13, 2022

Industry Perspectives

View all

Build Customers for Life with CX and Lifecycle Selling

May 16, 2022

Voice Analytics Are a Must-Have as Companies Evolve COVID-Rushed Tech

May 12, 2022

Top 5 Trends and Challenges Channel Partners Are Facing in 2022

May 9, 2022

Webinars

View all

Simplifying SaaS Security for MSPs

April 27, 2022

How to Supercharge The Network to Support Your IT Superhero Moves

May 3, 2022

The 2022 MSP Challenge: Scale Service Delivery Despite the Talent Gap

April 21, 2022

White Papers

View all

The New Bottom Line: How MSPs Can Meet the Healthcare Crisis While Evolving Their Businesses

April 19, 2022

How to build a Security Operations Center (on a budget)

April 4, 2022

The AT&T Cybersecurity Incident Response Toolkit

April 4, 2022

Channel Futures TV

View all

AT&T, Microsoft, Cisco, ThreatLocker on Unlocking Partner Potential

Agents Share ‘Secrets,’ Industry Opportunity

May 11, 2022

Vonage Addresses Potential Partner Opportunity via Acquisition by Ericsson

May 5, 2022

Lumen Technologies ‘Built for Growth and Scale’

May 4, 2022

Twitter

ChannelFutures

.@PaloAltoNtwks, @Deloitte expand alliance to offer #managedsecurity services. dlvr.it/SQVFrp https://t.co/7VFlXLFIEK

May 16, 2022
ChannelFutures

.@1111systems has snagged certain key managed service and cloud infrastructure assets through two key acquisitions.… twitter.com/i/web/status/1…

May 16, 2022
ChannelFutures

.@kaspersky vet to lead @CywareCo's North America channel. #cybersecurity dlvr.it/SQV5S3 https://t.co/2n9CZ4H6Ke

May 16, 2022
ChannelFutures

How to build and provide a great customer experience. #CX #ChannelPartners @IngramMicroInc dlvr.it/SQTrfh https://t.co/RsAA2Lliek

May 16, 2022
ChannelFutures

[email protected] global channel chief Rodney Clark made the surprise announcement he is leaving his position just one ye… twitter.com/i/web/status/1…

May 16, 2022
ChannelFutures

.@SAP touts growth of Rise with SAP at #SAPSapphireOrlando dlvr.it/SQTCs5 https://t.co/J2LrQrYlNQ

May 16, 2022
ChannelFutures

#CPExpo #cybersecurity roundtable discusses unprecedented times for channel chiefs, partners. @Sophos, @Fortinet,… twitter.com/i/web/status/1…

May 16, 2022
ChannelFutures

Being #cybersecurity proactive about the threat landscape makes a better #cloudcomputing strategy, says… twitter.com/i/web/status/1…

May 16, 2022

MSSP Insider

Business advice for MSSPs and news from the broader security channel.

Newsletters and Updates

Sign up for The Channel Report, Channel Futures Update, MSP 501 Newsletter and more.

Live Channel Events

Get the latest information on the next industry-leading Channel Partners event.

Galleries

Educational slide shows and images from live events.

Media Kit And Advertising

Want to reach our audience? Access our media kit.

DISCOVER MORE FROM INFORMA TECH

  • Channel Partners Events
  • Telecoms.com
  • MSP 501
  • Black Hat
  • IoT World Today
  • Omdia

WORKING WITH US

  • Contact
  • About Us
  • Advertise
  • Newsletter

FOLLOW Channel Futures ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookie Policy
  • Terms
Copyright © 2022 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.
This website uses cookies, including third party ones, to allow for analysis of how people use our website in order to improve your experience and our services. By continuing to use our website, you agree to the use of such cookies. Click here for more information on our Cookie Policy and Privacy Policy.
X