Saw a client's security setup after a breach and it changed how I sell audits

A local dental office in Portland got hit with ransomware last month and I saw their setup before and after. They went from a single router to a proper firewall and VLAN for about $1200. Has anyone else used real breach stories to convince clients to upgrade?

3 comments

3 Comments

hernandez.gavin20h ago

Are we sure scaring people with worst case scenarios is the right move long term? I get that it works in the moment, but @miaprice, you mentioned clients only taking you seriously after a competitor got hit, and that feels like a bandaid. Eventually every client is going to hear about breaches and just get numb to it, or worse, they'll think you're just fear mongering to sell them stuff they don't actually need. Most small offices don't need VLANs and proper firewalls for $1200, they just need basic backups and a password policy that gets followed. Charging them for enterprise gear because one guy in Portland got unlucky is how you end up with clients who hate your invoices.

fionamurphy2d ago

My buddy's shop spent $3k after a cryptolocker hit and they still lost a week of data.

miaprice2d ago

Geez, that's rough about your buddy. Seeing the aftermath of a breach firsthand really does make you rethink everything. I've had a couple clients who only took me seriously after a competitor got hit and made the local news.