Why SMBs can benefit from MXDR—and how the channel is helping deliver it

Despite the widespread perception that SMBs are targeted less often by cyber adversaries, they still need and deserve strong protection, according to Chorus Cyber CTO Mark Taylor

SMBs are targets for adversaries. Despite misconceptions that smaller organisations aren’t worthy of attention from attackers, the numbers suggest otherwise. A recent report from Microsoft highlighted survey findings indicating one in three UK and US SMBs have experienced a cyber attack, with the total cost of attack averaging $254,445.

Security is challenging SMBs

“For many SMBs, cybersecurity feels an overwhelming challenge” says Mark Taylor, CTO at Chorus Cyber.

“I’ve spoken to business leaders who know they need better security but simply don’t have the budget or in-house expertise for it. They’re inundated with security solutions that offer protection but require significant investment in tools, talent, and time—and most SMBs don’t have all three.”

This reality suggests SMBs need a different approach to security—one that’s proactive, comprehensive, and accessible.

Mark notes “This is where managed security comes in. By working with a Managed Security Services Provider (MSSP) and the latest Microsoft licensing updates, SMBs can quickly fill the gaps with MXDR (Managed Extended Detection & Response) services”.

MXDR is changing security

MXDR is a managed security service that uses XDR technologies to offer broader protection for IT estates than previous generations of security solutions, which often only focused on devices and servers. A recent significant change from Microsoft now means that Microsoft 365 Business Premium customers can now add Microsoft E5 Security licences to their stack and move from MDR to MXDR solutions.

“A quality MXDR service today can employ tools that extend threat detection and response across various cloud and on-premises environments, including identities, email, infrastructure, networking, data, and applications. And now with Microsoft’s new change, previously complicated and expensive licensing for these areas is simple and far more cost effective to attain” says Mark. “To add to this, incorporating a 24/7 Cyber Security Operations Centre (CSOC) with expert security analysts and dedicated automation engineers can significantly enhance the value of an MXDR service to an SMB's IT team.”

Delivering MXDR through the channel

Having the right security solution is only part of the challenge. SMBs need access to these services in a way that feels comfortable, where they can leverage their existing technologies and relationships with trusted suppliers. However, traditional IT Managed Service Providers (MSPs) can’t always offer the security services their customers now want.

“We’ve spoken to many IT providers eager to offer MXDR to their customers, but lack in-house SOC capabilities” says Mark. “Building that requires significant financial investment, hiring the right expertise, and years of work. There still aren’t enough security experts for every MSP to transition to MSSP each with their own 24/7 SOC operation, so working together often makes sense when it comes to keeping businesses safe”.

Recognising how distributors, VARs and MSPs want to meet the demand for managed security, Mark sees partnerships as essential to delivering these services for end customers. “At Chorus Cyber, we focused on a channel partner model early on. With a 24/7/365 CSOC offering scalable MXDR services, it was logical to leverage the channel partner ecosystem. Combining our expertise and resources with the channel’s network has supported our partners’ existing relationships with their customers, enhancing their service offerings with enterprise-grade MXDR security.”

The security businesses need

Until recently, many SMBs felt the security they needed was out of reach due to costs and complexity. But with MXDR, Mark believes that is changing. “The best MSSPs use intelligent security automation and machine learning to increase efficiency and accuracy, reducing costs and lowering the barrier to entry.” However, Mark notes, “the human element is still key. We call it human-in-the-loop, maintaining human oversight.”

With XDR technologies continuously improving, and major security vendors focusing on the SMB market, Mark believes the outlook is positive for SMB leaders. “MXDR services can prove a cost-effective way for SMBs to protect themselves, especially at a time when security is a board priority and there is a skills shortage. Despite the challenges, the channel’s strength is helping deliver these services at scale, and we’re excited to help drive that.”