Managed IT and security provider Magna5 says mid-market companies are carrying enterprise-level security demands with generalist IT teams, and that co-managed support is how they keep detection, response and round-the-clock monitoring covered.
In a 2 November statement, Magna5 vCISO leaders cite the 2025 ISC2 Cybersecurity Workforce Study, which found nearly six in 10 security professionals reporting critical or significant skills needs, and Hiscox’s 2026 Cyber Readiness Report, where 55% of surveyed organizations were investing in specialist staff. William Hale, Senior Director of vCISO Services at Magna5, said: “If leadership finds itself constantly reacting to security gaps instead of proactively managing risk, that’s a structural problem as much as a staffing problem.”
The firm’s argument rests on two operational points. The first is coverage: “Monitoring must be continuous so an alert on a holiday weekend gets the same attention as one on a Tuesday morning,” said Brandon Bell, Senior vCISO at Magna5. The second is ownership. Bell said tools bought in response to a single incident often end up as “expensive software generating alerts that nobody is tuning, reviewing, or acting on,” and that every purchase needs a named owner for configuration, alert review, response and reporting.
In our reading, the ownership test is the part a buyer of MDR or co-managed services can apply before signing: write down who configures each tool, who triages its alerts at 2 a.m. on a Sunday, and who reports on it, and the gaps in that list are the scope of the contract. Customer security questionnaires and cyber insurers asking for specific controls, both named in the statement, make that list a commercial document as well. Our brief on ransomware pressure on the mid-market and our opinion on why an exposure inventory decides the first hour cover the same staffing problem from the incident side.
Source: Magna5 via PR Newswire
