In a survey conducted among resellers last year, about 45% of respondents believe that over half of their customers don’t have the proper resources to adequately deal with security threats. Knowledge about cybersecurity appears to be scarce, too. About 63% of the respondents don’t think that the majority of their customers even know the difference between a unified threat management (UTM) appliance and a next-generation firewall (NGFW).
Given these findings—and today’s pervasive and continually evolving cyberthreats—it’s more important than ever to act as a security advisor to your customers. To help ensure you have the knowledge you need, here’s a list of valuable training options. Many of these courses are available through Ingram Micro.
- Security certification for the vendors you support—This is an essential starting point since customers today are looking to partner with IT firms with highly qualified people who know how to support the solutions they sell.
- CompTIA Security+—This international, vendor-neutral certification validates the baseline skills necessary to perform coresecurity functions. It’s another “must have” if you plan to focus on selling cybersecurity solutions.
- Certified Information Systems Security Professional (CISSP)—This is the globally recognized standard of achievement for the security “generalist.” It’s not just a badge of honor, it’s proof that you have the capabilities to design, engineer, implement and run an information security program.
- Certified Ethical Hacker (CEH)—This certification signifies that you’re a skilled professional who understands how to assess weaknesses and vulnerabilities in target systems. It’s a must if you intend to offer professional services in the security arena, such as penetration testing, for example.
- Computer Hacking Forensic Investigator (CHFI)—If you plan to offer forensics and incident response services, this training is essential.
- Secure Application Development—This is security training for coders, particularly useful for ISVs and partners with a dev team. It provides instruction in secure coding practices so you can meet industry and regulatory compliance requirements.
- The NIST Cybersecurity Framework (NIST CSF)—While this is not a training per se, it’s important for you to familiarize yourself with the guidelines it contains. The NIST CSF provides a policy framework of computer security guidance for how private sector organizations in the U.S. can assess and improve their ability to prevent, detect and respond to cyberattacks.
Pick and choose
Not all of these trainings are essential for every reseller. Take a closer look at the scope and subject matter of each and select those that are most appropriate to the types and level of security services you plan to offer. Of course, the more you know, the better you’ll be able to advise your customer. Being positioned as a security expert in today’s business environment is a smart strategy that’s sure to pay off.