Author: Chris Adams, CEO

  • Why CEOs and CFOs Are Rethinking IT and Security to Protect the P&L

    Why CEOs and CFOs Are Rethinking IT and Security to Protect the P&L

    For years, IT support followed a familiar pattern: something breaks, it gets fixed, and business moves on. That reactive model once worked—but over the last five years, technology has evolved at least tenfold, while many IT teams and service models have failed to evolve with it. Simply repackaging the same reactive approach into a monthly contract and calling it “managed services” hasn’t solved the problem. In many cases, it has only shifted risk away from the IT vendor and left clients paying for bundled services that do little to prevent issues in the first place. The financial impact of that disconnect—between modern technology and outdated IT operations—is now impossible for executive leadership to ignore.

    Today, the conversations I have with CEOs and CFOs aren’t about tools, tickets, or response times. They’re about downtime, lost productivity, and the growing concern that a single failure—whether operational or security‑related—could introduce costs no one planned for. That’s why the move toward truly proactive IT support and managed security isn’t an upgrade. It’s a financial decision rooted in risk reduction, cost control, and predictability.

    Financial Risk #1: Revenue Disruption

    Reactive IT and security models almost guarantee interruption. When systems fail, performance degrades, or threats go undetected, revenue is immediately impacted. Sales stop. Transactions fail. Service commitments are missed. Beyond the immediate loss, leadership is left managing inconsistency that makes forecasting difficult and erodes customer confidence.

    A proactive support model changes that dynamic. Continuous system monitoring, preventative maintenance, and early threat detection reduce the likelihood of disruption before it affects operations. The return is straightforward: stabilized uptime, protected revenue streams, and fewer surprises at quarter‑end.

    Financial Risk #2: Productivity Drain

    When IT support is reactive, the cost shows up across the organization. Internal teams spend their time responding to issues instead of improving systems. Highly skilled, high‑cost employees are pulled into firefighting, while every outage or slowdown costs productive hours across departments.

    Proactive IT support, paired with managed security, shifts that burden. Issues are identified and addressed before they escalate, allowing internal teams and end users to stay focused on their work. The financial benefit is tangible—better use of technical talent, fewer organization‑wide disruptions, and improved operational efficiency.

    Financial Risk #3: Data Loss and Unplanned Exposure

    The most underestimated risk is data loss. Whether caused by a cyber incident or a system failure, the consequences extend far beyond remediation. Regulatory penalties, legal exposure, and reputational damage can introduce long‑term financial consequences that were never budgeted.

    A proactive IT and security model replaces guesswork with structure. Standardized controls, system health monitoring, faster detection, and compliance alignment reduce exposure and help convert unpredictable events into managed, budgeted operating costs. Every organization, regardless of size, needs a clear IT and security baseline—and in my experience, the most effective place to start is with an objective security performance audit that shows exactly where risk and exposure truly exist.

    For executive leadership, the takeaway is clear. IT support and cybersecurity can no longer be treated as reactive or vendor‑centric functions. Organizations that continue to operate that way accept volatility as an unforeseen and unpredictable cost of doing business. Those that invest in proactive IT and security gain predictability, resilience, and measurable returns—the same expectations applied to any strategic investment.

  • Why VPNs are Obsolete

    Why VPNs are Obsolete

    VPNs, Zero Trust, and the Mid-Market: Key Takeaways from Zscaler’s 2025 VPN Risk Report

    As mid-market organizations modernize their infrastructure and embrace hybrid work, one theme keeps coming up: traditional VPNs are turning from a necessary evil into a real liability.

    Zscaler’s ThreatLabz 2025 VPN Risk Report, produced with Cybersecurity Insiders, surveyed more than 600 IT and security professionals to understand how VPNs are impacting security, operations, and user experience in 2025. Zscaler

    Why VPNs Are on the Way Out

    The report highlights several trends that should concern any security-conscious organization:

    • Rising breach exposure via VPN
      Over half of surveyed organizations reported cyber incidents tied to VPN vulnerabilities in the past year. VPN appliances are highly visible on the internet, making them a favored initial access vector for ransomware operators and other threat actors. GlobeNewswire
    • High-severity vulnerabilities are the norm, not the exception
      Analysis of recent VPN CVEs shows a growing share rated high or critical, often enabling remote code execution, privilege escalation, or authentication bypass on exposed VPN gateways.
    • Lateral movement amplifies the blast radius
      Because VPNs drop users “onto the network,” a single compromised credential can allow attackers to move laterally across systems, escalate privileges, and access sensitive data well beyond the original entry point.
    • Third-party and supply-chain risk
      The report notes strong concern about vendor and partner VPN tunnels becoming backdoors into corporate environments—especially when access is broad and poorly segmented.
    • Operational drag and user frustration
      Slow connections, frequent disconnects, and clunky authentication drive user workarounds and generate constant tickets for IT. Maintaining, patching, and scaling VPN concentrators consumes time and budget that could be spent on more strategic security initiatives.

    The Shift to Zero Trust

    In response, organizations are rapidly pivoting away from legacy VPN models toward Zero Trust Network Access (ZTNA) and broader zero trust architectures:

    • 65% of organizations plan to replace VPN services within a year.
    • 81% are adopting or planning to adopt a zero trust strategy on a similar timeline. Zscaler

    Zero trust flips the traditional model: instead of putting users on the network and relying on perimeter controls, it grants only application-level, least-privileged access based on identity, device posture, and context, with continuous verification. This reduces the attack surface, blocks lateral movement, and typically improves performance for remote and hybrid users.

    What This Means for ATG Clients

    For high-performance mid-market organizations, the message is clear:

    • Treat VPNs as a legacy technology to be strategically retired, not expanded.
    • Prioritize identity-centric, zero trust access for both employees and third parties.
    • Use this transition to simplify your security stack, reduce operational overhead, and align access controls with real business risk.

    As your Technology Performance Partner, Adams Technology Group helps clients plan and execute this transition—from VPN-centric architectures to zero trust models that better match today’s threat landscape and performance expectations.

    Learn More about why you should Retire Your VPN.


    Source & Attribution: This summary and commentary are based on the Zscaler ThreatLabz 2025 VPN Risk Report, commissioned by Cybersecurity Insiders and published by Zscaler, Inc.

    Read the full report on Cybersecurity Insiders: Zscaler ThreatLabz 2025 VPN Risk Report Cybersecurity Insiders

  • Is Wi‑Fi at 35,000 Feet Safe?

    Is Wi‑Fi at 35,000 Feet Safe?

    The Cybersecurity Risks of Airplane Wi‑Fi

    Wi‑Fi is now the norm on most planes. The convenience of in-flight WiFi is now punctuated by Teams and Slack DMs, emergency requests, and urgent email notifications. With my last refuge of ‘connectivity’ gone, a new question emerges: Should we have cybersecurity concerns about airplane Wi‑Fi?

    The answer is clear: yes, it is not safe.

    Recent federal advisories have highlighted serious cybersecurity risks associated with in‑flight Wi‑Fi. Demonstrations have shown how easy it is for hackers to set up a rogue Wi‑Fi access point (AP) and trick unsuspecting travelers into connecting. Even at 40,000 feet, a malicious actor can stage a “person‑in‑the‑middle” attack and intercept your data.

    Understanding the Risks

    Airplane Wi‑Fi may keep you connected, but it also exposes you to several cybersecurity threats. A federal advisory issued in July 2024 warned that most in‑flight networks are unencrypted, making it easy for attackers to intercept communications between passengers and the Internet. In addition, rogue Wi‑Fi networks can be easily created using cheap equipment, and weak network security configurations compound the problem.

    Common Risks from Airplane Wi‑Fi Networks:

    • Man‑in‑the‑Middle (MITM) Attacks — Hackers can intercept communication between your device and the network, capturing passwords, personal information, and even credit card details.
    • Malware Infections — Rogue Wi‑Fi networks can deliver malware to your device while still letting you browse normally.
    • Lack of Encryption — Many airplane networks don’t enforce strong encryption, leaving your communications exposed to eavesdropping.
    • Device Vulnerabilities — Many travelers use unpatched systems with open ports and services enabled, creating easy entry points for attackers on the same network.

    How to Protect Yourself on In‑Flight Wi‑Fi

    While the risks are real, several precautions can drastically reduce your exposure:

    1. Use a VPN — Encrypts all traffic, preventing eavesdropping and attacks.
    2. Use Trusted DNS Providers — Hard‑code your DNS to reputable services like Cloudflare or Google.
    3. Avoid Sensitive Transactions — Skip banking, payments, or confidential work without a VPN.
    4. Keep Devices Updated — Apply security patches regularly.
    5. Enable Two‑Factor Authentication — Protects accounts even if passwords are compromised.
    6. Turn Off Sharing & Bluetooth — Prevents unauthorized connections.
    7. Verify the Network Name — Confirm SSID with flight crew.
    8. Use HTTPS & Encrypted Apps — Stick to secure sites and end‑to‑end encrypted messaging.

    The Future of Airline Wi‑Fi Security

    Federal agencies have urged airlines to strengthen in‑flight network protection through stronger encryption, multi‑factor authentication, and rogue access‑point monitoring. Until those measures are adopted, passengers must take responsibility for their own cybersecurity and treat airplane Wi‑Fi as a public, untrusted network.

    Final Thoughts

    Airplane Wi‑Fi can make travel more productive, but it brings real cybersecurity risks. Man‑in‑the‑Middle attacks, malware infections, and unencrypted data transfers can all occur mid‑flight. Awareness and preparation are your best defenses. Use a VPN, avoid sensitive transactions, keep devices updated, and disable unnecessary features.

    Fly high, stay wise—protect your data and avoid costly surprises.

  • Is Adams Technology Group a High-Performing Company?

    Is Adams Technology Group a High-Performing Company?

    I’ve just released two in-depth podcast-style videos exploring a powerful question: Is ATG a high-performing organization? My answer? Absolutely.

    Part 1: Methodology – The Relentless Pursuit of Excellence

    This is about our culture, relationships, and soft skills. We don’t just aim to perform—we pursue excellence with intention. Our 3|29™ Performance Standard (answer calls in 3 rings, resolve tickets in 29 minutes) isn’t a slogan; it’s deliberate practice, like making 100 free throws in a row, not just shooting them. I share the core books that shaped this mindset.

    Part 2: Framework – Operational Prowess in Action

    Here, we dive into the hard skills and systems that make 3|29™ possible. We handle ~2,000 tickets monthly, not just quickly, but with precision and quality. Speed without control isn’t performance, it’s chaos. Think: many cars can hit 150 mph eventually… Doing it in under 10 seconds is elite. I break down the technical and operational books behind our framework.

    These videos are longer but packed with insight. Even if you don’t watch them right now, know this: We don’t just take tickets. We master them with intention, consistency, and care.

    Questions? Send me a message. I’d love to hear from you.

  • ATG’s Evolution: Managed Security Services (MSSP)

    ATG’s Evolution: Managed Security Services (MSSP)

    At Adams Technology Group, we believe the future of IT isn’t just about keeping systems running—it’s about keeping them secure.

    For years, we’ve built our reputation on fast response times, reliable help desk support, and world-class service delivery. But as the threat landscape has evolved, so has our mission. We’re moving beyond the traditional role of a Managed Service Provider (MSP) and embracing our future as a Managed Security Services Provider (MSSP).

    This evolution is about being proactive instead of reactive. Our goal isn’t just to fix issues after they happen—it’s to prevent them from happening at all. Security isn’t a single product or policy; it’s a mindset that drives everything we do. From the way we design networks to the way we educate clients, we’re building a culture of protection that keeps our partners safe, confident, and ahead of the curve.

    Central to this shift is our new Security Operations Center (SOC), a 24/7 command hub dedicated entirely to monitoring, detecting, and responding to potential threats. While our help desk continues to excel at supporting day-to-day needs, our SOC represents a new level of vigilance—an always-on defense system that reflects the realities of modern business.

    We also understand that true security starts with visibility. That’s why every engagement begins with our Titan Cybersecurity and Vulnerability Audit. Titan gives our clients an objective look at their network—identifying gaps, analyzing risks, and providing a clear roadmap toward resilience. We can’t protect what we don’t know, and this data-driven approach empowers our clients to make informed decisions about their technology posture.

    Our move toward managed security is rooted in partnership. We don’t replace internal IT teams; we strengthen them. We bring additional expertise, threat intelligence, and resources to the table—helping organizations reduce downtime, alleviate burnout, and focus on what they do best. Security isn’t a competing service; it’s a shared responsibility.

    We’re also holding ourselves to the same high standards we promise our clients. That’s why we’ve embarked on the journey to achieve SOC 2 compliance—a rigorous, year-long process that validates how seriously we take data protection and operational integrity. For us, this isn’t about checking a box; it’s about leading by example and continually improving how we safeguard the people and businesses that trust us.

    In a world where cyber threats are constant and complex, complacency isn’t an option. At ATG, we’re choosing to lead with transparency, accountability, and innovation. This transformation to an MSSP isn’t just an upgrade—it’s our commitment to building stronger, smarter, and more secure futures for every client we serve.

  • ATG Quarterly Review with Chris Adams and Shez L.

    ATG Quarterly Review with Chris Adams and Shez L.

    At Adams Technology Group, we believe progress comes from balance—between innovation and practicality, automation and human touch, the cloud and on-premise solutions. As we grow, our mission remains the same: to deliver smarter, more secure, and more personal technology experiences for every client.

    One of the biggest conversations happening across our client base is about modernization—specifically, moving servers to the cloud. There’s no single right answer. Cloud adoption isn’t just a technical migration; it’s a business strategy. Every environment is different, and success depends on the details: how your data is structured, which applications you use, and how your people access information. We help our clients evaluate not just the cost of moving to the cloud, but the purpose. Does it improve scalability, flexibility, or resilience? Those are the real benchmarks of a smart technology decision.

    At the same time, we know the cloud isn’t a one-stop shop for everything. Backup and recovery remain critical pieces of a complete IT strategy. We continue to recommend keeping a local, on-premise backup—because when the unexpected happens, having fast, reliable access to your data makes all the difference. It’s not about avoiding the cloud; it’s about designing a hybrid model that serves the realities of your business.

    Our team is also evolving internally to better serve you. From field services to our solutions team, we’re building processes that prioritize collaboration, foresight, and continuous improvement. We’ve launched new leadership and team-building initiatives, alongside company-wide book reviews and coaching programs. These aren’t just internal exercises—they reflect our belief that great client experiences begin with great company culture. When our people grow, our clients benefit.

    Security continues to be at the forefront of our strategy. We’ve expanded our Cybersecurity Audit services—a deep, fact-driven process that identifies vulnerabilities, explains risks in plain language, and helps you make informed choices about your next steps. This isn’t a canned “assessment” or sales tool. It’s a real audit—a transparent, data-backed evaluation of your IT posture that turns insight into action.

    We’re also excited about the rollout of Microsoft Teams Voice across our client base. By consolidating communication into a single, integrated platform, Teams Voice eliminates the need for traditional desk phones and adds powerful features like call tracking, recording, and automation. It’s cost-effective, fully integrated, and built for how modern businesses actually operate.

    Looking ahead, we’re preparing for Windows 10’s end of life this October, guiding our clients through necessary hardware and OS upgrades to ensure they remain secure and supported.

    At ATG, our focus is simple: keep our clients informed, secure, and connected. Whether it’s a server migration, cybersecurity initiative, or communication upgrade, our goal is always the same—turn technology into a competitive advantage. We’re proud of the work we’re doing and excited for what’s next. If you’re ready to modernize, secure, or simplify your IT strategy, we’re here to help you move forward—smartly, confidently, and with purpose.