Cybersecurity and law enforcement agencies from members of the Five Eyes (FVEY) intelligence alliance have shared guidance for managed service providers (MSPs) to secure networks and sensitive data, given their increased risk of being targeted in supply chain attacks.
A high-level summary of the actions that MSPs and their customers can take includes:
- Identifying and disabling accounts that are no longer in use.- Enforcing MFA on MSP accounts that access the customer environment and monitoring for unexplained failed authentication.- Ensuring MSP-customer contracts transparently identify ownership of information and communications technology (ICT) security roles and responsibilities.
You can read the advisory here - https://www.cisa.gov/uscert/ncas/alerts/aa22-131a