Sophos Names Chris Bell as Senior Vice President of Global Channel, Alliances and Corporate Development to Lead Next Evolution of Global Channel Strategy
Sophos, a global leader of innovative security solutions for defeating cyberattacks, today announced it has named Chris Bell as senior vice president of global channel, alliances and corporate development, where he will lead the evolution of Sophos' global channel strategy. This key appointment reinforces Sophos' channel-first commitment to deliver a world-class partner experience.
Bell joined Sophos following its acquisition of Secureworks, where he served as chief strategy officer, responsible for long-term vision, strategic partnerships, corporate development and strategy. Building on his career of more than two decades working in the technology industry, including nearly a decade in cybersecurity and channel; Bell's leadership will focus on developing and executing a channel strategy that prioritizes expanding reach, empowering partners and driving growth. Key priorities for Bell at Sophos will include:Enhancing Sophos Partner Experience to make it seamless for partners to do business with Sophos at high velocity, while streamlining operations. Continued Innovation for Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) with Sophos' industry-leading cybersecurity platform, enabling superior cybersecurity outcomes for customers, enhancing operational efficiency for security analysts, and boosting profitability for partners.Fueling Partner Growth with service delivery competencies, expanded partner enablement programs including persona-based training and fast-track training to expand partners cybersecurity expertise. Increasing Sophos' Market Reach by leveraging the unified portfolio of Sophos and Secureworks to deliver best-in-class security technologies and services, empowering partners to enhance cybersecurity and strengthen the security posture of organizations, from commercial to enterprise.Expanding Routes to Market by bolstering Sophos' presence across technology alliances, marketplaces and the cyber insurance ecosystem. Sophos will also continue to maintain its focus across resellers, service providers, and OEM channels.'Partners need adaptable strategies that prioritize flexibility to stay ahead of the increasingly complex threat landscape,' said Bell. 'Unifying Sophos' and Secureworks' portfolios presents a unique opportunity to accelerate a future-ready channel program that arms partners with the technology, services, insights, and enablement needed to protect customers and fuel long-term growth.'
A core piece of Sophos' channel strategy is to better equip partners in addressing the evolving security challenges faced by businesses of all sizes. By aligning more closely with partner needs and prioritizing an open ecosystem, Sophos aims to create a stronger partner network that supports customers from strategy to technology and deployment.
'Evolving our channel business to consistently deliver excellent customer outcomes is at the core of our partner go-to-market approach,' said Torjus Gylstorff, chief revenue officer at Sophos. 'We are thrilled to have Chris' strategic vision and deep channel and cybersecurity expertise to shape Sophos' channel strategy and build programs to empower partners to scale their security business.'Sophos consistently expands its service delivery capabilities and is recognized for its leadership in implementing partner feedback into its products and enablement offerings. Following the acquisition of Secureworks, Sophos is the leading pure-play cybersecurity vendor of managed detection and response services, protecting more than 28,000 global customers. Sophos also strives to streamline partner operations through initiatives like Sophos Partner Care, a 24x7 team dedicated to providing quoting, licensing and general partner account support, and Sophos Customer Success, a single point of contact for maximizing customer onboarding, retention and growth throughout the post-sales experience.Sophos Channel RecognitionSophos has been recognized as a Champion in the Canalys Global Cybersecurity Leadership Matrix 2025, underscoring its excellence in channel management and market performance. Additionally, Sophos received a 5-Star Award in the 2025 CRN Partner Program Guide and has been a recipient of the 5-Star Award for the past 12 years. The CRN Partner Program Guide is a key resource that helps solution providers identify vendor programs aligned with their business goals and committed to delivering high partner value.
To learn more about the Sophos Partner Program, visit: www.sophos.com/partners.
© 2000 - 2025 Al Bawaba (www.albawaba.com)

Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles


Al Bawaba
2 days ago
- Al Bawaba
Sophos Updates Its Sophos Firewall Software to Enhance Protection and Incident Response Capabilities
Sophos, a global leader of innovative security solutions for defeating cyberattacks,, announces an update to its Sophos Firewall, now including Sophos NDR Essential, which is free for all customers with an XStream Protection license for Sophos this integration, Sophos Firewall leverages two dedicated artificial intelligence engines to detect malware communications and communications using algorithmically generated domain names. This new feature, stemming from the Sophos Network Detection and Response probe, aims to identify malware communications even when they are previously unknown or not yet indexed. It complements the Active Threat Response capabilities already implemented in Sophos to Chris McCormack, Senior Product Marketing Manager at Sophos, 'NDR traffic analysis requires substantial processing power. That's why we've adopted a new approach by deploying an NDR solution in Sophos Cloud to offload the heaviest tasks from the firewall.'Sophos Connect now integrates EntraID for SSOThis new feature of the VPN client bundled with Sophos Firewall enhances both security and user experience for SSL and IPSEC VPN connections. It is now possible to use EntraID (Azure AD) to authenticate users and implement multi-factor authentication for Sophos Connect and access to the user portal hosted by the VPN-related improvements include:• Improved user interface and usability: Connection types have been renamed from 'site-to-site' to 'policy-based', and tunnel interfaces have been renamed 'route-based' to make them more intuitive.• Dynamic validation of the IP address pool allocated to VPN connections (SSL VPN, IPsec, L2TP, and PPTP) to better resolve potential IP address conflicts.• Strict profile enforcement: In IPsec profiles, default values are now excluded to ensure algorithm synchronization, thereby eliminating possible fragmentation of session negotiation packets that could otherwise prevent site-to-site VPN tunnels from being established.• Route-based VPN and SD-RED scalability: The system now supports up to 3,000 simultaneously established tunnels. Sophos Firewall solutions can now handle up to 1,000 SD-RED site-to-site tunnels and up to 650 concurrent SD-RED management improvements include:• More flexible DHCP Prefix Delegation (IPv6 DHCP-PD): Now supports /48 to /64 prefixes, improving compatibility with certain internet service providers.• Router Advertisement (RA) and DHCPv6 server: Now enabled by default.• Resizable table columns: The web admin interface continues to adapt to ultra-wide screens, and many configuration pages now allow column resizing as needed.• Enhanced object search functionality: The search field in the SD-WAN routing configuration screen now supports more criteria (route name, ID, objects, object values such as IP addresses and domains, among others). Local ACL rules now also support object name and value searches, including content-based searches.• Default configuration changes: Default firewall rules and rule groups previously created during new firewall setups have been removed. Only the default network rule and MTA rules are now provided in the initial configuration. The default firewall rule group and the default gateway probe for custom gateways are both now set to 'None' by by DesignSophos continues to enhance the intrinsic design of its firewalls. The secure-by-design approach includes containerization of specific features and integrity checks on critical operating system files using mathematical checksums. Any checksum mismatch triggers a potential compromise alert, allowing monitoring teams to proactively identify possible security incidents affecting the firewall OS integrity. Incident response and development teams are then able to react swiftly to critical Customers can now manually download and deploy this update on any Sophos Firewall equipped with a valid license.

Al Bawaba
09-04-2025
- Al Bawaba
Sophos Names Chris Bell as Senior Vice President of Global Channel, Alliances and Corporate Development to Lead Next Evolution of Global Channel Strategy
Sophos, a global leader of innovative security solutions for defeating cyberattacks, today announced it has named Chris Bell as senior vice president of global channel, alliances and corporate development, where he will lead the evolution of Sophos' global channel strategy. This key appointment reinforces Sophos' channel-first commitment to deliver a world-class partner experience. Bell joined Sophos following its acquisition of Secureworks, where he served as chief strategy officer, responsible for long-term vision, strategic partnerships, corporate development and strategy. Building on his career of more than two decades working in the technology industry, including nearly a decade in cybersecurity and channel; Bell's leadership will focus on developing and executing a channel strategy that prioritizes expanding reach, empowering partners and driving growth. Key priorities for Bell at Sophos will include:Enhancing Sophos Partner Experience to make it seamless for partners to do business with Sophos at high velocity, while streamlining operations. Continued Innovation for Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) with Sophos' industry-leading cybersecurity platform, enabling superior cybersecurity outcomes for customers, enhancing operational efficiency for security analysts, and boosting profitability for Partner Growth with service delivery competencies, expanded partner enablement programs including persona-based training and fast-track training to expand partners cybersecurity expertise. Increasing Sophos' Market Reach by leveraging the unified portfolio of Sophos and Secureworks to deliver best-in-class security technologies and services, empowering partners to enhance cybersecurity and strengthen the security posture of organizations, from commercial to Routes to Market by bolstering Sophos' presence across technology alliances, marketplaces and the cyber insurance ecosystem. Sophos will also continue to maintain its focus across resellers, service providers, and OEM channels.'Partners need adaptable strategies that prioritize flexibility to stay ahead of the increasingly complex threat landscape,' said Bell. 'Unifying Sophos' and Secureworks' portfolios presents a unique opportunity to accelerate a future-ready channel program that arms partners with the technology, services, insights, and enablement needed to protect customers and fuel long-term growth.' A core piece of Sophos' channel strategy is to better equip partners in addressing the evolving security challenges faced by businesses of all sizes. By aligning more closely with partner needs and prioritizing an open ecosystem, Sophos aims to create a stronger partner network that supports customers from strategy to technology and deployment. 'Evolving our channel business to consistently deliver excellent customer outcomes is at the core of our partner go-to-market approach,' said Torjus Gylstorff, chief revenue officer at Sophos. 'We are thrilled to have Chris' strategic vision and deep channel and cybersecurity expertise to shape Sophos' channel strategy and build programs to empower partners to scale their security business.'Sophos consistently expands its service delivery capabilities and is recognized for its leadership in implementing partner feedback into its products and enablement offerings. Following the acquisition of Secureworks, Sophos is the leading pure-play cybersecurity vendor of managed detection and response services, protecting more than 28,000 global customers. Sophos also strives to streamline partner operations through initiatives like Sophos Partner Care, a 24x7 team dedicated to providing quoting, licensing and general partner account support, and Sophos Customer Success, a single point of contact for maximizing customer onboarding, retention and growth throughout the post-sales Channel RecognitionSophos has been recognized as a Champion in the Canalys Global Cybersecurity Leadership Matrix 2025, underscoring its excellence in channel management and market performance. Additionally, Sophos received a 5-Star Award in the 2025 CRN Partner Program Guide and has been a recipient of the 5-Star Award for the past 12 years. The CRN Partner Program Guide is a key resource that helps solution providers identify vendor programs aligned with their business goals and committed to delivering high partner value. To learn more about the Sophos Partner Program, visit: © 2000 - 2025 Al Bawaba (


Al Bawaba
03-04-2025
- Al Bawaba
Sophos Report: In 56% of Sophos IR and MDR Cases, Adversaries Logged In, Instead of Breaking In
Sophos, a global leader of innovative security solutions for defeating cyberattacks, today released the 2025 Sophos Active Adversary Report, which details attacker behavior and techniques from over 400 Managed Detection and Response (MDR) and Incident Response (IR) cases in 2024. The report found that the primary way attackers gained initial access to networks (56% of all cases across MDR and IR) was by exploiting external remote services, which includes edge devices such as firewalls and VPNs, by leveraging valid accounts. The combination of external remote services and valid accounts aligns with the top root causes of attacks. For the second year in row, compromised credentials were the number one root cause of attacks (41% of cases). This was followed by exploited vulnerabilities (21.79%) and brute force attacks (21.07%). Understanding The Speed of AttacksWhen analyzing MDR and IR investigations, the Sophos X-Ops team looked specifically at ransomware, data exfiltration, and data extortion cases to identify how fast attackers progressed through the stages of an attack within an organization. In those three types of cases, the median time between the start of an attack and exfiltration was only 72.98 hours (3.04 days). Furthermore, there was only a median of 2.7 hours from exfiltration to attack detection. 'Passive security is no longer enough. While prevention is essential, rapid response is critical. Organizations must actively monitor networks and act swiftly against observed telemetry. Coordinated attacks by motivated adversaries require a coordinated defense. For many organizations, that means combining business-specific knowledge with expert-led detection and response. Our report confirms that organizations with proactive monitoring detect attacks faster and experience better outcomes,' said John Shier, field CISO. Other Key Findings from the 2025 Sophos Active Adversary Report:Attackers Can Take Control of a System in Just 11 Hours: The median time between attackers' initial action and their first (often successful) attempt to breach Active Directory (AD) - arguably one of the most important assets in any Windows network – was just 11 hours. If successful, attackers can more easily take control of the organization. Top Ransomware Groups in Sophos Cases: Akira was the most frequently encountered ransomware group in 2024, followed by Fog and LockBit (despite a multi-government takedown of LockBit earlier in the year).Dwell Time is Down to Just 2 Days: Overall, dwell time – the time from the start of an attack to when it is detected – decreased from 4 days to just 2 in 2024, largely due to the addition of MDR cases to the Time in IR Cases: Dwell time remained stable at 4 days for ransomware attacks and 11.5 days for non-ransomware cases. Dwell Time in MDR Cases: In MDR investigations, dwell time was only 3 days for ransomware cases and just 1 day for non-ransomware cases, suggesting MDR teams are able to more quickly detect and respond to Groups Work Overnight: In 2024, 83% of ransomware binaries were dropped outside of the targets' local business hours. Remote Desktop Protocol Continues to Dominate: RDP was involved in 84% of MDR/IR cases, making it the most frequently abused Microsoft tool. To shore up their defenses, Sophos recommends that companies do the following:Close exposed RDP portsUse phishing-resistant multifactor authentication (MFA) wherever possiblePatch vulnerable systems in a timely manner, with a particular focus on internet-facing devices and servicesDeploy EDR or MDR and ensure it is proactively monitored 24/7 Establish a comprehensive incident response plan and test it regularly through simulations or tabletop exercises Read the full It Takes Two: The 2025 Sophos Active Adversary Report on © 2000 - 2025 Al Bawaba (