Short on security expertise? You can still choose the right solutions

Small- to medium-sized businesses (SMBs) often lack the resources and knowledge to properly vet cybersecurity solutions. Avoid poor decisions with these best practices.

hyperconvergence fork in the road decision choice data center briefcase
Francescoch / Getty Images

Finding the right security solution can be challenging for a small- or medium-sized business (SMB), not only because of their size, but because they often make mistakes when choosing vendors. With the application of some best practices, though, the process can be less fraught with stress.

SMBs have three disadvantages when dealing with security vendors, observed John Pescatore, director of emerging trends at the SANS Institute, an information security training, cybersecurity certifications and research company. "Since they're small, they have less leverage over a vendor compared to a larger company that's going to spend millions," he says.

"They usually have smaller staffs so they can't use the products that bigger companies use," he continues. "So, if they try to copy the big companies, they end buying the wrong products."

What's more, he added, "They typically don't have a dedicated security person that can go to shows and meet with security vendors during the year and keep up with the latest trends."

To continue reading this article register now

What is security's role in digital transformation?