Scott McCrady's path to becoming CEO of SolCyber started in the server rooms of the early 2000s. Back then, he was installing Nokia security appliances and building some of the first security operations centers for major corporations. McCrady spent years at companies like Symantec and FireEye, where he learned that keeping businesses safe requires more than just technical know-how. He built Symantec's security services across Asia Pacific, managing teams in multiple countries and learning how different businesses approach security challenges. Later at FireEye, he helped launch their partner strategy during the rise of nation-state attacks. Today, he runs SolCyber with a simple mission: help companies protect themselves from identity-based attacks that bypass traditional security tools.

McCrady explains that hackers don't break into networks the way they used to. Twenty years ago, they looked for open ports and vulnerable servers. Ten years ago, they targeted employee laptops and phones. Today they steal usernames and passwords, especially administrative accounts. Insurance companies tell McCrady that nine out of ten breaches happen because someone's login credentials got compromised. The problem gets worse because IT teams often give employees more system access than they need—it's easier than figuring out exact permissions each person requires. McCrady shared an example: a company with 500 employees had over 70 administrative accounts. Some hadn't been used in nine months, then suddenly started browsing the internet—a clear sign that hackers had taken control.

Even large companies with thousands of employees struggle with basic security tasks. McCrady works with organizations that can't answer simple questions like "Where are all our security logs stored?" or "Who can access our customer data?" These aren't startups—these are established companies with IT departments and security budgets. They have data scattered across different systems, some going to one security vendor, some to another, and some not monitored at all. While vendors push artificial intelligence and machine learning solutions, most businesses just need help organizing what they already have. They need to get their house in order before worrying about advanced threats.

So what actually works? McCrady keeps it simple with five must-haves. First, turn on multi-factor authentication everywhere, even though software companies charge extra for it. Second, add email security beyond what Microsoft or Google provides because business email compromise is how most attacks start. Third, install endpoint detection software that catches modern malware. Fourth, run security awareness training so employees recognize phishing emails (and to keep your cyber insurance valid). Fifth, buy cyber insurance now while it's affordable. McCrady's company, SolCyber, packages these essentials into what they call "foundational coverage"—basically, outsourced security for businesses that need protection but can't afford a full security team. For larger companies, they handle the complex stuff like managing security logs from dozens of systems and responding to attacks in real-time.

The days of building walls around your network are over. Today's hackers use legitimate usernames and passwords to walk through the front door. McCrady's experience shows that most businesses need help with the basics before they can tackle advanced threats. Modern managed security providers like SolCyber offer practical solutions that focus on protecting user identities, monitoring for unusual behavior, and responding quickly when something goes wrong. It's like having someone clean your kitchen while you enjoy your Friday afternoon—sometimes it's smarter to bring in experts who do it every day.

LinkedIn Profile: www.linkedin.com/in/scottmccrady/
SolCyber Website: solcyber.com/


Scott McCrady: Modern MSPs and Identity-first Security

Kitecast features interviews with security, IT, compliance, and risk management leaders and influencers, highlighting best practices, trends, and strategic analysis and insights. Kitecast is cohosted by Tim Freestone and Patrick Spencer who have more than four decades of combined experience in technology and cybersecurity senior leadership roles.