Cybersecurity Stress-Testing and Human Factors Highlighted in Interview with 800 Tech’s Systems Administrator Jamal Philip

In a segment of Freedom 106.5 FM’s “Morning Rumble,” the host welcomed Systems Administrator Jamal Philip from the local IT firm 800 Tech. The discussion centered on why businesses, regardless of size, must move beyond merely purchasing cybersecurity tools toward regular validation of their defenses.

Philip explained that many organizations buy firewalls, anti-virus software, cloud-security tools, and endpoint protection without ever testing whether those solutions actually work during a real attack. He advocated for regular penetration testing—commonly called “pen-testing”—to simulate attacks and reveal gaps in firewalls, anti-virus, EDR, and email-security systems.

The host raised a common objection from small-business owners who believe they are too insignificant to be targeted. Philip countered that even a five-person team can hold valuable data; understanding the market and data they handle makes them a potential target. He emphasized that cyber threats are not limited to large corporations and that proactive defenses are essential for all.

A major theme was the misconception that cybersecurity is akin to insurance, only needed after a breach occurs. Both the host and Philip argued that cybersecurity should be viewed as an active, ongoing service—similar to paying for a cell-phone connection or vehicle insurance that also requires regular maintenance. They highlighted basic hygiene practices such as multi-factor authentication, regular software updates, and staff training, noting that many firms purchase tools but lack the expertise to use them effectively.

Training and awareness were identified as a weak point. Philip and the host discussed how social-engineering attacks, especially phishing, exploit human error. An anecdote was shared about a phishing email that mimicked a legitimate service (Brevo) used for the caller’s e-commerce site. The email contained a counterfeit “action-required” link, which the caller recognized as a scam because the login details did not match their normal credentials. Philip suggested that breaches of third-party services like Brevo could expose client data, allowing attackers to harvest email lists and launch further phishing campaigns, sometimes even leveraging AI to craft convincing messages.

When asked about immediate response steps after detecting suspicious activity, Philip advised a “verify-first” approach: contact the implicated company, change passwords, enable multi-factor authentication, and involve the organization’s IT or cybersecurity department. He warned that attackers often create confusion and fear to prompt hasty actions, so calm verification is critical.

The interview concluded with practical advice for listeners: regularly assess cybersecurity posture, practice good IT hygiene, and treat security as an ongoing, active service rather than a one-time purchase. By integrating regular testing, staff training, and swift incident response, businesses of any size can better protect themselves against increasingly sophisticated cyber threats.