Shows
True NorthCracking MSSP Pricing: How Healthcare Practices Can Stop OverspendingMSSP Pricing can make or break a healthcare practice’s IT strategy. From per-device to per-user models, tier-based bundles, and pick-and-choose options, each approach has its own advantages, and potential surprises. This podcast breaks down the costs, hidden fees, and the true value behind managed security services. Learn how to match coverage to your staff, devices, and compliance needs, and take control of your cybersecurity budget before it spirals out of control.Read more: https://www.truenorthitg.com/mssp-pricing/Co...
2025-12-1701 min
Sunny's Silver LiningsRed Helm CEO Michael Stratos | MSP + MSSP Leadership & CybersecurityMichael Stratos, CEO of Red Helm, shares his journey from Ideal Integrations to building a leading MSP + MSSP cybersecurity company. In this video, Sunny Kaila and Michael discuss: The story behind Red Helm's rebrand Turning competitors into collaborators in the MSP channel How AI and cybersecurity drive growth for MSPs Red team, pen testing, and continuous security strategies Leadership lessons and perspective-driven decision making Whether you're an MSP looking to scale, a cybersecurity leader, or an IT channel partner, this conversation shows how collaboration, trust, and innovation create exponential impact. #MSP #MSSP #CyberSecurity #RedHelm #PenTesting #ITLeadership #BusinessGrowth #AI #ChannelPartners
2025-10-1620 min
ETMA Tech Talk PodcastBuild Smarter Cyber Security with Check Point Technologies Jessica Reece, Head of MSSP, Americas ETMA Tech TalkCyber threats are business disruptors. Cybercrime cost businesses over $8 trillion dollars last year.... 60% of companies still treat cybersecurity as just another IT expense, instead of a growth enabler."In this episode of ETMA Tech Talk, Jessica Reece, Head of MSSP Americas at Check Point Software Technologies sits down with host Joe Basili, to explore the rapidly evolving landscape of managed security service providers and enterprise cybersecurity. With over a decade of experience helping partners transition from traditional resellers to comprehensive managed security service providers, Jessica brings invaluable insights into what keeps CISOs awake at night a...
2025-09-2335 min
The BMK Vision Podcast#20 – From the Trenches - From Navy Comms to MSSP - Leap into Entrepreneurship (Will Robinson)New founder story with real talk for aspiring MSP/MSSP owners. Josh Peterson sits down with Will Robinson to unpack the leap from government IT to launching a cybersecurity-forward services firm—covering sales, pricing, tool choices, and hiring. If you’re building from zero or resetting your go-to-market, this is your blueprint.
✅ Enjoyed this episode?
Like, subscribe, and share your biggest takeaway below.
https://beringmckinley.com/bering-mckinley-podcast-blog
Will Robinson (Thirdeye View Corp) joins Josh Peterson to explore what it actually takes to start—and sustain—an MSSP that small businesses trust. From sharpening CEO-as-seller...
2025-09-1753 min
QPC Security - Breakfast BytesMSP vs MSSP: Why Outsourced Security Often Falls ShortIn this episode of Breakfast Bytes, Felicia explained the key differences between Managed Service Providers and Managed Security Service Providers, emphasizing that organizations should prefer MSPs acting as their full internal IT departments for security functions unless they are the IT department and lack necessary technical skills. She highlighted the limitations of the current incident response paradigm, particularly the challenges with outsourcing security monitoring to MSSPs and the lack of effective escalation to capable incident response teams. Felicia stressed the importance of having a skilled incident commander with strong decision-making authority and technical expertise to effectively handle security incidents.
2025-09-0428 min
Channel Insider: Partner POVQuorum Cyber CEO Talks Microsoft MSSP Award, AI, and Global GrowthIn this episode of Channel Insider: Partner POV, host Katie Bavoso sits down with Federico Charosky, Founder and CEO of Quorum Cyber, a fast-growing MSSP that’s gone all-in on Microsoft. Learn how this Scotland-born company scaled to over 400 employees, why it built its award-winning Clarity platform, and how it’s approaching AI across customer protection, internal services, and Microsoft Copilot tools. Federico also shares insights on Quorum Cyber's U.S. expansion strategy, vertical market wins in housing associations and higher education, the importance of growing talent in-house, and how a focus on outcomes—not just technology—sets Quorum Cyber ap...
2025-06-0543 min
Technically UHow To Find The Right Managed Security Service Provider - MSSPIn this episode of Technically U, we explore how to select the perfect Managed Security Service Provider (MSSP) to protect your business from evolving cyber threats. Discover the key factors to consider, including certified staff, 24/7 monitoring, SIEM platforms, and Service Level Agreements (SLAs). We break down the importance of proactive vs. reactive security, SOAR services, log retention, and rapid response times.Plus, learn how to evaluate an MSSP’s geographic coverage, remediation services, and customer references.✅ Key Topics:Certified cybersecurity professionals - CISSP, CEH, CISM, CompTIA Security+: (1:00)24/7 moni...
2025-03-1507 min
Channel Insider: Partner POVHow Omega Systems Puts The Security In MSSPIn this episode of Channel Insider: Partner POV, host Katie Bavoso sits down with Mike Fuhrman, CEO of Omega Systems, to discuss the company’s transformation from a traditional Managed Service Provider (MSP) to a Managed Security Services Provider (MSSP). This shift was a priority for Fuhrman when he joined the company in 2023. Fuhrman explains what nonnegotiable requirements truly define an MSSP. The CEO and IT veteran also shares what brought him from the vendor space to the partner side of industry, the strategic approach that sets Omega apart, and how cybersecurity and compliance have become critical and defining po...
2025-02-2035 min
TOSS C3 PodcastWhy Companies Replace Their MSP/MSSP: The Cost of Lack of Expertisen this episode of the TOSC3 Podcast, cybersecurity expert Greg Hanna continue their discussion on the top reasons companies switch their Managed Service Provider (MSP) or Managed Security Service Provider (MSSP). This time, they tackle Reason #2: Lack of Expertise and explain why having the right specialists on your cybersecurity team is crucial to preventing costly cyber threats like ransomware, malware, and system failures.The difference between generalists and specialists in IT and cybersecurity.How an MSP without the right expertise fails to detect and prevent hidden cyber threats.Why businesses lose confidence in their IT provider after repeated unresolved is...
2025-02-1208 min
The Cybersecurity Defenders Podcast#192 - Talent acquisition, training, and retention in the MSSP space with Paul Ihme, Cofounder & Managing Principle at SoteriaOn this episode of The Cybersecurity Defenders Podcast we talk about talent acquisition, training, and retention in the MSSP space with Paul Ihme, Cofounder & Managing Principle at Soteria.Paul is a cybersecurity professional with extensive experience in both federal and private sectors. He is the co-founder and managing principal of Soteria, a firm that provides tailored cybersecurity solutions and strategic advisory services to help businesses defend against cyber threats 24/7. Soteria specializes in managed detection and response, domain monitoring, and risk management for Microsoft 365 environments among other things. Prior to founding Soteria, Paul held key roles in cybersecurity...
2025-02-1139 min
The Cybersecurity Defenders Podcast#188 - The MSSP Alert 2024 Pricing Benchmark Report with Sharon Florentine, Senior Managing Editor at CyberRisk AllianceOn this episode of The Cybersecurity Defenders Podcast we speak with Sharon Florentine, Senior Managing Editor at CyberRisk Alliance, about the MSSP Alert 2024 Pricing Benchmark Report.Sharon is a master technology storyteller and editor with over two decades of experience in shaping the way we understand and engage with technology. Sharon's career spans an impressive range of platforms, from books and print magazines to podcasts, live events, and digital media. She's covered everything from AI and cybersecurity to career development and diversity in tech.Currently, Sharon is the Senior Managing Editor for CyberRisk Alliance's channel...
2025-01-2325 min
The Cybersecurity Defenders Podcast#187 - Automation in MSSP Operations with David Burkett, Cloud Security Researcher at CorelightOn this episode of The Cybersecurity Defenders Podcast we talk about automation in MSSP operations with David Burkett, Cloud Security Researcher at Core light. David has deep expertise in cloud threat detection and automation. Over the course of his career, David has built and optimized three different Cyber Security Operations Centers for MSSP and MDR providers, demonstrating his unparalleled skill in scaling security operations through automation and efficient processes.David has consulted for over 40 Fortune 500 companies and large federal organizations, helping them design and implement SOAR platforms and playbooks that enhance detection and response capabilities...
2025-01-1425 min
Let's SOC About ItHow Can Offering Threat Modelling as a Service Boost Your MSSP?It’s a new year, and with that brings an opportunity for MSSPs to re-evaluate their growth strategies to reach new customers and diversify their offerings. This week, Amy chats with Tony UcedaVelez, CEO & Founder of VerSprite, about offering Threat Modelling as a Service. Tony explains his 7-step threat modelling methodology, PASTA, and how he incorporates his methodology into security services for VerSprite’s customers.
In this episode:
😎 How can threat modelling help MSSPs identify and prioritize security risks for clients?
🖼️ What are the key threat modelling methodologies or frameworks MSSPs can us...
2025-01-0226 min
MSS NetworkThe Minimum MSSP Stack | Matt KinseyLive at the MSS Miami 2024 it was a pleasure to speak with MSP leader Matt Kinsey about the shape of the Minimum MSSP stack including from a non tech-stack perspectiveAbout Matt:LinkedInAbout the MSS Network:WebsiteHashtags:#Security #MSSP #MSP #TechnicalSales #SoftSkills #MSSNetwork #ChannelSecurity #SecurityArchitect #MSS #MSSForum #SuperArchitect #Security #Skillset #MSSMiami #MinimumStack #SecurityStack #Miami #FloridaSec
2024-11-2536 min
SMB Community PodcastMSSP vs. MSP: Why does Security Matter?Hosts James and Amy are back this week to discuss the series of noteworthy headlines from this week as well as this week's MSP question of the week. --- 1.) Notes On The News IT Nation - one announcement CompTIA Aquired - New Divisions will be created Department of Labor - Ruling for Overtime Labor --- 2.) MSP Question of the week: Are you a REAL MSSP? What does it take to become a MSSP? --- Our upcoming events and more: December 4: M&A Workshop in Scottsdale, AZ...
2024-11-2118 minSMB Community PodcastMSSP vs. MSP: Why does Security Matter?Hosts James and Amy are back this week to discuss the series of noteworthy headlines from this week as well as this week's MSP question of the week. --- 1.) Notes On The News IT Nation - one announcement CompTIA Aquired - New Divisions will be created Department of Labor - Ruling for Overtime Labor --- 2.) MSP Question of the week: Are you a REAL MSSP? What does it take to become a MSSP? --- Our upcoming events and more: December 4: M&A Workshop in Scottsdale, AZ...
2024-11-2118 min
Joey Pinz Discipline Conversations#502 LogiCon: 🔐 Securing the Future: Zack Finstad on MSSP InnovationSend us a text🎙 Zack Finstad: MSSP Insights and Cybersecurity at LogicConIn this episode, Joey Pinz interviews Zack Finstad, VP of Cybersecurity at Logically, about his role in managing security services for clients. Zack discusses how Managed Security Service Providers (MSSPs) differ from traditional MSPs by offering deeper, more specialized security solutions. He shares his passion for staying ahead of evolving cyber threats, the importance of layering security like an "onion," and how his team operates 24/7 to provide clients peace of mind. Zack also emphasizes the critical role of continuous education, training, and...
2024-11-0618 min
XL.net InsightsXL.net Named One of MSSP Alert’s Top 250 MSSPs of 2023We’re excited to announce that XL.net has been ranked 111 on the MSSP Alert Top 250 list of managed security service providers. Learn how our commitment to cybersecurity, compliance, and advanced threat protection has earned us recognition as a trusted leader in the industry.
Read more: https://xl.net/blog/xl-net-named-top-250-mssps-2023/
MSSP Alert's Top 250 List: https://www.msspalert.com/top-250-2023?page=14
Connect with us:
Website: https://xl.net/
Facebook: https://www.facebook.com/xl.net.smb
Twitter: https://twitter.co...
2024-10-1601 min
Business of Tech: Daily 10-Minute IT Services InsightsTue Nov-28-2023: Malware-Free Cyberattacks, FTC's AI Oversight, and AT&T's MSSP SpinoffIn this episode, we cover three important news stories. First, a Huntress report reveals that over half of SME cyberattacks in Q3 were malware-free, with adversaries using scripting frameworks and legitimate tools instead. Next, the US FTC is enhancing oversight on AI use to target fraud and deception. Lastly, AT&T announced a spinoff of its cybersecurity business to form a new MSSP entity. Tune in for all the details on the Business of Tech.Three things to know today00:00 Over Half of SME Cyber Attacks in Q3 Were...
2023-11-2910 min
Business of Tech: Daily 10-Minute IT Services InsightsTue Nov-28-2023: Malware-Free Cyberattacks, FTC's AI Oversight, and AT&T's MSSP SpinoffIn this episode, we cover three important news stories. First, a Huntress report reveals that over half of SME cyberattacks in Q3 were malware-free, with adversaries using scripting frameworks and legitimate tools instead. Next, the US FTC is enhancing oversight on AI use to target fraud and deception. Lastly, AT&T announced a spinoff of its cybersecurity business to form a new MSSP entity. Tune in for all the details on the Business of Tech.Three things to know today00:00 Over Half of SME Cyber Attacks in Q3 Were...
2023-11-2910 min
TubbTalk: The Podcast for Managed Service Providers[140] How To Transform from an MSP to MSSP for Business GrowthIn this episode, Richard Tubb speaks to Mark Taylor, the founder of Chorus, a Microsoft-focused MSP. Today, they are a leading MSSP, providing channel focused MDR and MXDR services built on the Microsoft security stack. Mark now serves as the CTO.Mark explains his background and how he ended up in the IT space, what an MSSP does and why he decided to become one. He also explains how the team manage their responsibilities when providing both MSP and MSSP services.Richard asks Mark to explain various security acronyms, how Chorus deal with client security...
2023-11-191h 10
Cyber For Hire (Audio)How Managed Services Providers Can Exceed Evolving SecOps Expectations - Christopher Fielder - CFH #30The days of an MSSP or MSP being a security device babysitter are over. Clients expect more from your SOC, SIEM and SecOps offerings, and evolving attacks will demand more of you. It's time to level up -- but how does one upgrade from basic to top-tier services? According to our featured speaker, there are several key steps: more comprehensive, cross-industry threat data collection; more refined, contextual and meaningful analysis of threat telemetry data; and ample use of threat intelligence, data science and security research. This interview will examine the key challenges and opportunities associated with these critical objectives.
2023-09-2649 min
Cyber for Hire (Video)Level Up: How Managed Services Providers Can Exceed Evolving SecOps Expectations - Christopher Fielder - CFH #30The days of an MSSP or MSP being a security device babysitter are over. Clients expect more from your SOC, SIEM and SecOps offerings, and evolving attacks will demand more of you. It's time to level up -- but how does one upgrade from basic to top-tier services? According to our featured speaker, there are several key steps: more comprehensive, cross-industry threat data collection; more refined, contextual and meaningful analysis of threat telemetry data; and ample use of threat intelligence, data science and security research. This interview will examine the key challenges and opportunities associated with these critical objectives.
2023-09-2636 min
Cyber for Hire (Video)Sign Language: How to Write Effective Security Services Contracts - CFH #29There's a lot that goes into the creation of a managed services contract before the client ever puts their John Hancock on the dotted line. As an MSSP, you want to make sure that expectations, for both sides of the relationship are spelled out clearly and cogently. The language within must address key terms and stipulations related to payments, roles and responsibilities, scope and scale of services, liability, and plenty more. In this segment, we'll discuss some of the most important clauses to include in your MSSP contracts, and how to avoid unfortunate omissions or vagueness that can result...
2023-08-0126 min
Cyber For Hire (Audio)Supply Chain Security: How Moving Accountability Upstream Helps & Hurts MSSPs - Dave Sobel - CFH #29One of the most significant takeaways of the White House's recently unveiled National Cybersecurity Strategy is the assertion that software developers, OEMs, and technology service providers must bear the brunt of the responsibility -- rather than end-users -- for keeping cyber environments secure. With the looming prospect of further legislation and regulations looming that could impose greater liabilities on software products and services, MSSPs and other cyber services providers must understand where they fit into the overall scheme of things. Are MSSPs an extension of the end-user or are they one of the upstream providers who will be held...
2023-07-311h 01
Cyber For Hire (Audio)Brian Johnson - CFH #27Try as they might to keep their clients in compliance with privacy and security regulations, managed services providers are still at the mercy of the organizations they serve. Unfortunately, companies don't always follow the MSSP's or vCISO's advice on items like responsible data stewardship, privacy policies and breach notification. If an attack does transpire and the company draws the ire of regulators, the security services provider could even end up a scapegoat, or even embroiled in a liability case. This Q&A discussion will look at what resource an MSSP or vCISO service has when their customer fails to...
2023-07-2559 min
Cyber For Hire (Audio)Balancing Dark Web Threat Intel: Fair Attention for MSSPs - Alex Holden - CFH #28Our guest for this segment spends his days where others dare not tread: the deep dark web. Here he collects information on cybercriminal activity that could be a precursor to major attack or evidence that one has already occurred. For companies that can't or won't conduct dark-web recon for themselves, outsourcing this threat intelligence service is a valuable option. Still, this kind of contracted services relationship works only if the provider keeps its intel reports relevant, customized and timely. This discussion will cover how to make the most out of such an arrangement, as well as real some of...
2023-07-2556 min
Cyber for Hire (Video)Equal Time? Ensuring Each MSSP Client Gets Their Fair Share of Attention - CFH #28Every MSSP customer is different in their own way. But they all deserve to remain secure from attacks. And so it's important that managed services providers don't play favorites to the point where certain clients eat up a disproportionate amount of time and resources. MSSPs must ensure that they are fairly and proportionally allocating their account reps, technicians, support specialists, consultants, security analysts, pentesters and a host of other employees across their entire customer base. This segment will examine recommendations on how to better accomplish this objective. Show Notes: https://securityweekly.com/cfh-28
2023-07-2519 min
Cyber for Hire (Video)Non-compliant Clients: Righting the Ship Before Regulators Pounce - Brian Johnson - CFH #27Try as they might to keep their clients in compliance with privacy and security regulations, managed services providers are still at the mercy of the organizations they serve. Unfortunately, companies don't always follow the MSSP's or vCISO's advice on items like responsible data stewardship, privacy policies and breach notification. If an attack does transpire and the company draws the ire of regulators, the security services provider could even end up a scapegoat, or even embroiled in a liability case. This Q&A discussion will look at what resource an MSSP or vCISO service has when their customer fails to...
2023-07-1831 min
Cyber For Hire (Audio)M&A Integration Challenges & Alert Fatigue: MSSP Strategies for Client Escalation - Jim Broome - CFH #26Last year, ChannelE2E listed more than 1,000 merger and acquisition deals involving MSPs, MSSPs and other similar service provider organizations. Typically when any M&A deal occurs, there are bound to be redundancies and overlaps in services, tools and personnel. For MSSPs that find themselves in this situation, it's important to consolidate and integrate the best of their assets across multiple entities, while maintaining operational consistency. This is no small task, but this segment will offer examples and tips to help move in the right direction. MSSP SOC analysts are often barraged with security alerts that pop up as...
2023-07-041h 02
Cyber for Hire (Video)Avoiding Security Monitoring Alert Fatigue: When Do You Escalate to Your Client? - CFH #26MSSP SOC analysts are often barraged with security alerts that pop up as anomalous activity is detected on clients' networks. Not all of these notifications are worth reporting and acting upon, but it takes only one overlooked incident to result in a full-fledged attack on the customer. This segment will look at the perennially challenging question of when it's the right time to let your clients know that something may be amiss, without inundating them with unnecessary reports. Also, we'll examine how automation can help reduce the burden on strained SOC analysts. Show Notes: https://securityweekly.com...
2023-07-0425 min
Cyber for Hire (Video)M&A Madness: Overcoming MSSP Integration Challenges Following an Acquisition - Jim Broome - CFH #26Last year, ChannelE2E listed more than 1,000 merger and acquisition deals involving MSPs, MSSPs and other similar service provider organizations. Typically when any M&A deal occurs, there are bound to be redundancies and overlaps in services, tools and personnel. For MSSPs that find themselves in this situation, it's important to consolidate and integrate the best of their assets across multiple entities, while maintaining operational consistency. This is no small task, but this segment will offer examples and tips to help move in the right direction. Show Notes: https://securityweekly.com/cfh-26
2023-07-0436 min
Cyber For Hire (Audio)Quantifying Risk & Optimizing Responses: Scaling Your MSSP for Reduced Randomness - Ira Winkler - CFH #25Risk isn't a static measurement. Threats like malware campaigns, vulnerabilities, human error and unreliable third-party partners can fluctuate in their severity depending on ever-changing circumstances. That's why knowing which risk is of highest priority at any given time can allow MSSPs to dynamically adjust their prevention and mitigation efforts, for both themselves and their clients. But which sources of risk do you measure, and what factors go into such a calculation? How frequently do you remeasure? And upon learning the latest risk scores, what are sound tactics for prioritization, response and mitigation? This session will explore the big questions...
2023-06-271h 03
Cyber for Hire (Video)Generating Economies of Scale With Your MSSP Business Model - CFH #25Managed services providers know that investments in talent, tools and infrastructure can take a heavy financial toll. But as MSSPs continue to grow and take on more clients, they can hopefully achieve certain economies of scale such that their previous infusions of funds eventually pay for themselves. This session will look at the key investment areas where security providers can get the most bang for their buck as they expand their business and expand their customer base. Show Notes: https://securityweekly.com/cfh-25
2023-06-2725 min
Cyber For Hire (Audio)Going Passwordless: Preparing Your Clients for a Credentials-Free Future - Christine Owen - CFH #24It's been a big year for the passwordless movement, with tech giants Apple, Google and Microsoft supporting the FIDO Alliance's efforts to replace conventional credentials with passkey technology. Still, passwords have long been engrained into people's daily routines, so users may need some convincing to change their behaviors. And likewise, managed security services providers may need to persuade their own corporate clients that passwordless is the future. This segment will examine some of the key breakthroughs and remaining challenges surrounding passwordless technologies from an MSSP perspective. You’re a big fish in a pretty big pond. But there are va...
2023-06-131h 09
Cyber for Hire (Video)Going Passwordless: Preparing Your Clients for a Credentials-Free Future - Christine Owen - CFH #24It's been a big year for the passwordless movement, with tech giants Apple, Google and Microsoft supporting the FIDO Alliance's efforts to replace conventional credentials with passkey technology. Still, passwords have long been engrained into people's daily routines, so users may need some convincing to change their behaviors. And likewise, managed security services providers may need to persuade their own corporate clients that passwordless is the future. This segment will examine some of the key breakthroughs and remaining challenges surrounding passwordless technologies from an MSSP perspective. Show Notes: https://securityweekly.com/cfh-24
2023-06-1332 min
Cyber For Hire (Audio)CFH #21 - Merike KaeoRisk assessment questionnaires are a standard practice when evaluating current or prospective third-party partners. And yet some folks may justifiably ask: How valuable are these questionnaires if there are no consequences for fudging your answers, or even outright lying? This session will examine common weaknesses and oversights in the third-party assessment process, while recommending how to improve vendor transparency by obtaining key documentation, asking the right questions, and enforcing regulations. A great many MSSP security professionals are truly passionate about making the digital world a safer place for businesses and their users. But at the e...
2023-05-161h 12
Cyber for Hire (Video)Pricing Practices That Fit the Bill - CFH #21A great many MSSP security professionals are truly passionate about making the digital world a safer place for businesses and their users. But at the end of the day, it is still a business, and good cybersecurity isn't free. And therein lies the strategy around pricing: What pricing models work best for your organization and appeal most to your customer base? And how do you ensure that your pricing policies are fair and transparent? This session will examine the key considerations and best practices around pricing and billing. Show Notes: https://securityweekly.com/cfh21
2023-05-1634 min
Cyber For Hire (Audio)CFH #20 - Pete BowersWhat’s the best way to ensure operational resilience against cybercriminals’ tactics, techniques and procedures? Well, just rearrange the letters in TTP, and you get PPT: people, process and technology. This session will examine how organizations can score, benchmark and improve their cyber resilience through a combination of security processes, proper cyber hygiene and employee behavior, and a robust technology infrastructure. To do it right, all three elements need to be in place. The worst has happened. You failed to protect one or more managed services clients from a cyberattack. Maybe you were even infected yours...
2023-05-161h 39
Cyber for Hire (Video)Rehabilitating Your Reputation After a Security Setback - CFH #20The worst has happened. You failed to protect one or more managed services clients from a cyberattack. Maybe you were even infected yourself. Or perhaps a failed product launch or negative engagement with a customer has resulted in a scathing review. There are lots of ways an MSSP can wind up with a tattered reputation -- and sometimes they're not even fully to blame. And that's why a good incident response and disaster recovery plan means not only getting your IT networks up and operational again; it also means salvaging your reputation and not letting this incident define you...
2023-05-0954 min
Business Security Weekly (Video)Insider Risk and Choosing the Right MSSP: A CISO's Guide - BSW #305A resilient cybersecurity strategy is essential to running your business while protecting against security threats and preventing data breaches. For CISOs, partnering with a managed service security provider (MSSP) means you can be in control of your organization's information and infrastructure security without placing a strain on internal personnel or resources which is critical in today's uncertain economy. With an MSSP on board, CISOs are better equipped to meet strategic and business goals, while improving operations and reducing expenses. This interview will discuss not only why to consider an MSSP but how to choose the right one for the...
2023-05-0931 min
Cyber for Hire (Video)The RSA Conference: How to Stand Out on the Show Floor - CFH #18Jugglers! Magicians! Freebies! You can find plenty of commotion and distractions on the show floor at the RSA conference or any major cyber convention for that matter. If you're a managed security services provider trying to sell your wares, it can be a challenge to distinguish yourself amid all the noise and chaos of events like these. This segment will offer tips and recommendations for making your customer impressions more memorable so that you stand out from the rest of the crowd and your marketing message is not lost in the blur. At the same time, we'll also examine...
2023-04-2549 min
Cyber For Hire (Audio)CFH #18 - Juan ValenciaYour favorite intelligence feeds are warning of several up-and-coming new campaigns that are victimizing companies much like your clients. Maybe they're even targeting MSSPs themselves. Now it's up to you to assess and prioritize these latest threats, and determine to what extent they require you to change your approach, institute additional safeguards, or update your security awareness messaging. What's a reasonable response? What's a knee-jerk overreaction? This session will examine how managed services providers and security professionals in general should and shouldn't react to the latest threat intel release. Our guest will also review some of his favorite top...
2023-04-251h 26
Cyber for Hire (Video)What’s Fueling Growth for MSSPs Today? - Jessica C. Davis - CFH #15What are the market trends that are driving growth and changes in the managed security service provider market? MSSPAlert.com, an affiliate of Cyber for Hire, does an annual survey of MSSPs to find out about growth trends, technology providers, different types of incidents they see in their work with small and mid-sized businesses, and other information and insights. In this edition of Cyber for Hire, we’ll talk about some of those trends revealed in the survey. For instance, some of the factors driving growth in the MSSP market today include the global shortage of talent across enterprise, mi...
2023-04-0433 min
Cyber For Hire (Audio)CFH #15 - Jessica C. DavisWhat are the market trends that are driving growth and changes in the managed security service provider market? MSSPAlert.com, an affiliate of Cyber for Hire, does an annual survey of MSSPs to find out about growth trends, technology providers, different types of incidents they see in their work with small and mid-sized businesses, and other information and insights. In this edition of Cyber for Hire, we’ll talk about some of those trends revealed in the survey. For instance, some of the factors driving growth in the MSSP market today include the global shortage of talent across enterprise, mi...
2023-04-041h 14
Cyber for Hire (Video)Is Regulatory Compliance Governing Your Toolsets and Policies? - CFH #13To what extent should compliance with privacy and security frameworks -- whether imposed by government bodies or industry standard organizations -- be the decisive factor when MSSPs choose their tech stacks and craft their threat defense strategies? Meanwhile, are would-be MSSP customers deciding which managed services provider to hire largely based on their compliance needs, or are they more influenced by other market forces and threat trends? And for those organizations who ARE building their managed services strategies around compliance, which frameworks, laws or standards should be highest priority? This segment will offer important perspectives on these key questions.
2023-03-2143 min
Cyber For Hire (Audio)CFH #13 - Ryan JamiesonSecurity is a shared responsibility between MSSPs and their clients. Yes, the provider was hired to do a job -- be it SOC operations, threat intelligence or offensive security -- but part of the job is also to consult and communicate with the client to help them gain some degree of cyber self-sufficiency. This discussion will reveal how providers can teach their clients how to develop a secure corporate culture, how to share responsibility and accountability for security matters, and how to broaden their security awareness through partnerships with professional development organizations and information sharing groups.
2023-03-211h 14
Cyber for Hire (Video)Don't Lose Your Head Count: Best MSSP Talent Retention Strategies - CFH #12In the cybersecurity job market, it's "Advantage Worker," as the demand for talent has opened up a world of possibilities for security professionals to seek out greener pastures. Meanwhile, other infosec pros are so stressed and burned out that they're looking to quit the daily grind altogether. These factors have combined to create a cyber talent turnover crisis, which can result in organizational instability, stalled implementations, slow responses to threats, and overworked, stretched-thin employees. In this segment, we'll identify some of the best talent retention practices and policies that give you better odds of earning loyalty from your cyber...
2023-03-1452 min
Cyber for Hire (Video)Building a Managed Services Business Strategy Around XDR - Chris Bell - CFH #11For managed services providers looking to build their market strategy around XDR and MDR -- or a hybrid of the two solutions -- it's important to understand how this approach will shape future priorities for their tech stacks and toolsets, their clients and their vendor partners. What kinds of next-generation services can they build from an XDR/MDR foundation? How does this differ from a more traditional MSSP approach? And how can managed services providers clearly communicate and define what XDR constitutes to clients who don't fully understand the concept? Show Notes: https://securityweekly.com/c...
2023-03-0736 min
Cyber For Hire (Audio)CFH #11 - Chris BellFor managed services providers looking to build their market strategy around XDR and MDR -- or a hybrid of the two solutions -- it's important to understand how this approach will shape future priorities for their tech stacks and toolsets, their clients and their vendor partners. What kinds of next-generation services can they build from an XDR/MDR foundation? How does this differ from a more traditional MSSP approach? And how can managed services providers clearly communicate and define what XDR constitutes to clients who don't fully understand the concept? Once upon a time, organizations t...
2023-03-071h 20
Cyber for Hire (Video)Optimizing Your MSSP Support Desk - CFH #10Network difficulties can crop up at any time, as can possible attacks. And companies like having the reassurance that at a moment's notice they can reach out to their MSSP for help. This segment will look at how managed security services providers can operate a top-notch, responsive support desk that meets or exceeds their clients' needs through best practices and policies, optimal workflows and automated tools. Show Notes: https://securityweekly.com/cfh10
2023-02-2840 min
Cyber For Hire (Audio)CFH #10 - Remote Monitoring & Management HijackingsIn late January, CISA, the NSA and the MS-ISAC released an advisory warning about the malicious the use of legitimate remote monitoring and management software, after uncovering illegal hacking activity on two federal civilian executive branch networks. Whether compromised via social engineering or through exploits, RMM tools can grant unauthorized users potentially unfettered access to your MSP clients. So the question must be asked: Are you using RMM responsibly? Network difficulties can crop up at any time, as can possible attacks. And companies like having the reassurance that at a moment's notice they can reach o...
2023-02-281h 24
Cyber For Hire (Audio)CFH #8 - Jason LewkowiczIn late January, law enforcement officials disrupted the operations of the Hive cybercriminal group, which has profited off of a ransomware-as-a-service (RaaS) business model. And though the takedown was an inspiring victory, there’s plenty more ransomware where that came from. Indeed, Microsoft just reported that at the conclusion of 2022 it was tracking more than 100 threat actors using over 50 different ransomware families to extort victims. And many of these criminal networks operate like professional businesses in this underground economy. Bottom line: there’s still a lot of work to be done, and it begins by collecting and communicating the righ...
2023-02-071h 27
Cyber for Hire (Video)Know Your Enemy: Gathering Intel on the Ransomware-as-a-Service Business Model - CFH #8In late January, law enforcement officials disrupted the operations of the Hive cybercriminal group, which has profited off of a ransomware-as-a-service (RaaS) business model. And though the takedown was an inspiring victory, there’s plenty more ransomware where that came from. Indeed, Microsoft just reported that at the conclusion of 2022 it was tracking more than 100 threat actors using over 50 different ransomware families to extort victims. And many of these criminal networks operate like professional businesses in this underground economy. Bottom line: there’s still a lot of work to be done, and it begins by collecting and communicating the righ...
2023-02-0744 min
Cyber for Hire (Video)MSSP Mental Health: Minimizing Stress & Burnout - Jason Lewkowicz - CFH #8The life of a Cybersecurity professional is not for the faint of heart. The job can be stressful, sometimes thankless. And when an attack transpires, you can work long hours knowing the fate of your employer is on the line. Or in the case of an MSSP, the fate of your client. You might even argue that being a managed security services provider magnifies the stress and burnout factor because you must answer to multiple companies at once – all with high expectations of you. With that in mind, this session will examine key policies and strategies that you can in...
2023-02-0742 min
Cyber For Hire (Audio)CFH #6 - Candy AlexanderNo matter how well constructed an MSSP's security architecture is, or how tight its security controls are -- all that good work can be wasted or sabotaged far too easily when the client organization fails to follow standard cyber security hygiene practices. Just because a company uses a managed security provider to bolster its cyber preparedness doesn't mean they still don't have a responsibility to promote security awareness across their workforce and institute some basic cyber governance policies. In this segment, Cyber for Hire will seek to identify and find potential solutions for addressing users' key security awareness failings...
2023-01-241h 26
Cyber for Hire (Video)It Can’t All Be on the MSP: Is Your Client’s Lack of Cyber Awareness Undermining You? - CFH #6No matter how well constructed an MSSP's security architecture is, or how tight its security controls are -- all that good work can be wasted or sabotaged far too easily when the client organization fails to follow standard cyber security hygiene practices. Just because a company uses a managed security provider to bolster its cyber preparedness doesn't mean they still don't have a responsibility to promote security awareness across their workforce and institute some basic cyber governance policies. In this segment, Cyber for Hire will seek to identify and find potential solutions for addressing users' key security awareness failings...
2023-01-2445 min
Sg2 PerspectivesMSSP: Bringing Accountable Care to All Medicare BeneficiariesThe US’s largest value-based payment model, the Medicare Shared Savings Program (MSSP), recently underwent changes designed to retain those organizations already involved and to encourage participation from new organizations. This week on Sg2 Perspectives, Sg2 Associate Principal Keely Macmillan joins us to talk about these changes (eg, a more gradual glide path to downside risk, the advancement of health equity) and how provider organizations—whether they are part of MSSP or not—should move forward.
Learn more about MSSP and how Sg2 can help with your organization’s value-based care strategy in Sg2’s blog post a...
2023-01-1813 min
Cyber For Hire (Audio)CFH #4 - Harpreet SidhuIt's not uncommon for IT security professionals and OT engineers to be at odds with each other over cyber governance policies and procedures inside industrial settings. And when the IT professionals work for an outside firm such as an MSP, then that can create another level of separation that can further expand the schism between IT and OT. With that in mind, what are some key considerations that managed security providers and their industrial clients must account for in order to develop a governance framework that meets the needs of both IT security pros and OT engineers?
2023-01-101h 21
Cyber for Hire (Video)Ransomware Response Best Practices When an MSSP Is Infected - CFH #4You're an MSSP that has just experienced a severe ransomware attack that's disrupting your services. How do you make sure that the infection isn't passed along to your clients? And what do you do if sensitive information on your customers has been exfiltrated? In this segment, Cyber for Hire will lay out some of the key initial response steps MSSPs must take when they themselves turn out to be the victim. Show Notes: https://securityweekly.com/cfh4
2023-01-1047 min
Cyber for Hire (Video)IT-OT Convergence: Developing an MSSP Cyber Governance Model for Industrial Settings - Harpreet Sidhu - CFH #4It's not uncommon for IT security professionals and OT engineers to be at odds with each other over cyber governance policies and procedures inside industrial settings. And when the IT professionals work for an outside firm such as an MSP, then that can create another level of separation that can further expand the schism between IT and OT. With that in mind, what are some key considerations that managed security providers and their industrial clients must account for in order to develop a governance framework that meets the needs of both IT security pros and OT engineers? ...
2023-01-1034 min
Cyber For Hire (Audio)CFH #3 - Brian HaugliLet's play the dating game! When pairing up a company with a fractional or virtual CISO, there are a lot of factors to consider. Personalities count, as do cyber skills and IT background, industry sector experience, geographical limitations, and the company's stated core objectives. The available IT expertise on the client's corporate payroll also makes a difference. This session will look at how to find a healthy, harmonious match between vCISO and client, and what warning signs to watch out for if the relationship starts to get rocky. When finding cyber talent is difficult, end u...
2023-01-031h 12
Cyber for Hire (Video)MSSPs Need Workers Too: Landing the Right Person for the Job - CFH #3When finding cyber talent is difficult, end user organizations often turn to managed security providers to fill the void. But then where do MSSPs turn to hire infosec professionals? What are their top strategies for developing and optimizing talent? And for that matter, what makes a quality MSSP infosec pro to begin with? Who's built for this kind of job, working with multiple clients, not just one company? Show Notes: https://scmagazine.com/cfh3
2023-01-0332 min
Cyber for Hire (Video)Cyber Insurance: The MSSP's Biggest Salesman? - Joseph Edward Brunsman - CFH #2It's becoming increasingly difficult to qualify for cyber insurance. Insurance providers are wary of multimillion dollar payouts resulting from costly ransomware attacks, and so the onus is on companies to prove that they can meet certain minimum cyber hygiene standards. One of the potential paths to reach this objective is by contracting a managed security provider who can ensure that you meet coverage criteria. But just how big of a difference does this strategy make -- enough for MSSPs to make insurance a key selling point? Conversely, do cyber insurance companies judge MSSPs' coverage worthiness based on the clients...
2022-12-2738 min
Cyber for Hire (Video)Is the MSSP Model the Wave of the Future? - CFH #1If you were to ask most companies right now, "Why you have you hired an MSP?" the answer probably would sound something like: “Resources are strained. Talented is limited. So we’re outsourcing certain security functions to a firm that has the built-in capabilities to manage this for us.” But is the MSSP model becoming more than a convenient economics and personnel decision? Is this actually becoming a go-to "must have" for all organizations -- the next logical evolution in the industry’s approach to solving security? Plus: Dear Cyber for Hire, our marriage counselor advice column for MSPs and thei...
2022-12-2033 min
Cyber For Hire (Audio)CFH #1 - Chris McCurdyIf you were to ask most companies right now, "Why you have you hired an MSP?" the answer probably would sound something like: “Resources are strained. Talented is limited. So we’re outsourcing certain security functions to a firm that has the built-in capabilities to manage this for us.” But is the MSSP model becoming more than a convenient economics and personnel decision? Is this actually becoming a go-to "must have" for all organizations -- the next logical evolution in the industry’s approach to solving security? Plus: Dear Cyber for Hire, our marriage counselor advice column for MSPs and thei...
2022-12-201h 07
SecureConnection Podcast: IT Security/Security Experts for MSP’sJourney from MSP - MSSPJulian is joined by Technology Leader and IT Channel Veteran, Juan Fernandez, Co-Founder and CEO at MSP Growth Coalition and Channel Chief at HacWare. Juan gives us his three keys to success in evolving your IT Services business in today’s crazy cybersecurity landscape. Some great stories and examples from when he built his MSP business and made the shift to MSSP.
You can catch up with Juan at our upcoming Cybersecurity Expo in Phoenix, February 16 & 17. Reserve your spot today at https://iotssa.com/cybersecurity-expo-phoenix/ Connect with Juan on LinkedIN and check out what he is doing no...
2022-12-0741 min
YusufOnSecurity.com94 - Is MSSP right for you?Enjoying the content? Let us know your feedback! Fo the majority of enterprises, security can turn out to be extremely challenging, especially with the move to remote and/or hybrid work and the current geo-political tension. The International Information Systems Security Certification Consortium also known as (ICS)2, estimates that 23% of companies have seen an increase in cybersecurity incidents since they’ve asked their employees to remote work. Cyber security skill sets are always in demand, and most organizations do not have the capability to attract good talent. So, is MSSP the right move for you...
2022-11-1932 min
Health Policy – The Race to Value Podcast™Ep 128 – Research Analysis of 2021 MSSP Performance Results and ACO REACH Final Cohort, with Kate de Lisle
The Institute for Advancing Health Value has recently released two new Intelligence Briefs highlighting two major impactful events in the movement to value-based care.
2021 MSSP Performance Results Analysis: The Institute analyzes 2021 performance data, sharing high-level program performance and examining savings across participation tracks, by the provider type, size and location of ACOs, and their experience in the program, and reflects on the future of the MSSP in light of the recently proposed changes to the program and the beginning of CMS’s new capitated total cost of care model, ACO REACH.
The ACO REACH Final Cohort: The...
2022-10-0632 minBonus episode – The Race to Value Podcast™Ep 128 – Research Analysis of 2021 MSSP Performance Results and ACO REACH Final Cohort, with Kate de Lisle
The Institute for Advancing Health Value has recently released two new Intelligence Briefs highlighting two major impactful events in the movement to value-based care.
2021 MSSP Performance Results Analysis: The Institute analyzes 2021 performance data, sharing high-level program performance and examining savings across participation tracks, by the provider type, size and location of ACOs, and their experience in the program, and reflects on the future of the MSSP in light of the recently proposed changes to the program and the beginning of CMS’s new capitated total cost of care model, ACO REACH.
The ACO REACH Final Cohort: The...
2022-10-0632 minThe Race to Value PodcastEp 128 – Research Analysis of 2021 MSSP Performance Results and ACO REACH Final Cohort, with Kate de Lisle
The Institute for Advancing Health Value has recently released two new Intelligence Briefs highlighting two major impactful events in the movement to value-based care.
2021 MSSP Performance Results Analysis: The Institute analyzes 2021 performance data, sharing high-level program performance and examining savings across participation tracks, by the provider type, size and location of ACOs, and their experience in the program, and reflects on the future of the MSSP in light of the recently proposed changes to the program and the beginning of CMS’s new capitated total cost of care model, ACO REACH.
The ACO REACH Final Cohort: The...
2022-10-0632 minSecureConnection Podcast: IT Security/Security Experts for MSP’sJourney from MSP to MSSPCisco go all in with the IT Channel supporting MSPs and the SMB market. Julian talks with Provider Elevate, Leader of Global MSP for Cisco, Michelle Ragusa-McBain and Business Development Manager, Fenil Kacharia on the current state of cybersecurity and the IT Channel. Michelle tells us that a recent survey showed, only 50% of IT Service Providers are properly insured against a cyber attack/event. This tells us that we have a long way to go getting the market up to speed and out in front of the bad guy.
The journey from MSP to MSSP, post pandemic...
2022-10-0540 minSecureConnection Podcast: IT Security/Security Experts for MSP’sJourney from MSP to MSSPCisco go all in with the IT Channel supporting MSPs and the SMB market. Julian talks with Provider Elevate, Leader of Global MSP for Cisco, Michelle Ragusa-McBain and Business Development Manager, Fenil Kacharia on the current state of cybersecurity and the IT Channel. Michelle tells us that a recent survey showed, only 50% of IT Service Providers are properly insured against a cyber attack/event. This tells us that we have a long way to go getting the market up to speed and out in front of the bad guy.
The journey from MSP to MSSP, post pandemic...
2022-10-0540 min
Active Cyber Zone from ActiveCyber.netSajay Rai, CEO of Securely Managed LLC, Discusses MSSP Offerings with Active CyberSend us a textChris Daly of Active Cyber sits down with Sajay Rai, CEO of Securely Managed LLC, a top 250 MSSP, to discuss the challenges of being a MSSP. He reveals how he customizes offerings and partners with leading vendors to meet the changing needs of his diverse customer set. He also discusses his journey from security consulting to MSSP and how his sister company - Securely Yours, which focuses on security consulting - provides a synergy that benefits his customers from risk assessments to bootstrapping new companies into a cost-effective and resilient security posture. Learn...
2022-08-1025 min
The Cyber Go-To-Market podcast for cybersecurity sales and marketing teams. Save Cybr Donut!123: Scott McCrady, CEO of SolCyber Managed Security Services, talks about the important role MSSP plays in today's cyber security marketSend me a text (I will personally respond)We are in for a treat for today’s episode. Scott McCrady, CEO of SolCyber Managed Security Services, joins me today to talk about his incredible story about how he went from being an engineer to switching careers and working his way up in the cybersecurity sales space.When he left his engineer job to pursue his passion of working in sales, he started his new career with Symantec. While he was there for an entire decade, he was able to bring businesses from zero to helping th...
2022-05-0344 min
Channel Journeys PodcastStephan Tallent: The Pay as You Grow MSSP ProgramManaged Security Services Providers (MSSPs) are a vital component of a cybersecurity vendor’s partner ecosystem. When I wanted to learn how to build a best in class MSSP program, I turned to Stephan Tallent, VP of North America MSSPs at Cybereason. Stephan shares the details behind Cybereason’s new ‘Pay As You Grow’ program designed to nurture Managed Security Services Providers by providing greater licensing flexibility and reducing risk to the partner. This is a great concept that can be applied just as well to an MSP program.
KEY TAKEAWAYS
Here are 8 of the many thin...
2022-04-1347 min
Cyber Rants - The Refreshingly Real Cybersecurity PodcastEpisode #60 MSSP vs. vCISO vs. Cybersecurity Program DevelopmentIt's a wild market for cybersecurity services, often confusing buyers and selling companies less than ideal solutions. The question is, what cybersecurity services are the best fit for your organization's needs? This week, the guys discuss the pros and cons of the common services to help you understand the best fit. From Managed Security Services Providers (MSSP) and Virtual Chief Information Security Officers (vCISO), to remote security teams and tailored Cybersecurity Program Development solutions, this episode covers the critical considerations for selecting the right cybersecurity service partner.Pick up your copy of Cyber Rants on Amazon.
2022-03-0741 min
The MSP ZoneThe Difference Between MSP and MSSPWOM (Weaver Outrage Meter): Medium
Aside from the obvious additional "S", the inclusion of security in MSP is both incorrect and misleading. Looking at the historical evolution of the MSP profession, managed security has been baked into managed IT services from the very early days.
What has changed? MSSPs are now the rage and there is an active campaign taking place to disrupt existing managed services philosophy. We will examine the leading causes behind this MSP vs. MSSP battle, and offer opinions on what normal MSPs ought to be doing today.
Highlights:
Do normal MSPs avoid security?
What is behind the MSSP...
2022-03-0136 min
Netzpalaver PodcastsInterview mit Trustwave - Wie kann ein MSSP helfen, Unternehmen vor Cyberattacken zu schützen?Die Frage ist schon lange nicht mehr, ob ein Cyberangriff erfolgreich ist. Die Frage lautet: Wann und vor allem wie schnell man den Cyberangriff stoppt! Netzpalaver sprach diesbezüglich via Remote-Session mit Fred Tavas, Director Sales Europe bei Trustwave, darüber, wie ein Managed-Security-Service-Provider Unternehmen helfen kann, die allgegenwärtige Gefahr durch Cyberattacken zu minimieren und welche Vorteile ein MSSP zusätzlich offeriert.
2022-02-2606 min
Cyber UnpluggedS2 E2: Totally Secure – becoming an MSSP has never been more easyFor organisations MSSPs are an efficient and cost-effective way to protect their data and network from intrusions while reducing the complexity of the process. For example, hiring an in-house cybersecurity team can be more expensive than working with an MSSP plus MSSPs can also help businesses save money on equipment and software tools, key reasons why many businesses are now turning to MSSPs to secure their organisations. Moving from VAR to MSSP can be resource and cost intensive which is why SonicWall and Exertis together have listened to our channel partners and launched a new managed security service offering t...
2022-02-0317 min
B2B Tech Talk with Ingram MicroHow to Choose Between MDR, MSSP, and SIEM-as-a-ServiceBefore the pandemic, security teams were stretched perilously thin. Now, with the onset of remote work and the continuing avalanche of new technology onto our networks, security teams are at their breaking points.There simply aren’t enough individuals to do the job. That’s where security-as-a-service can fill the gap.Shelby Skrhak speaks with Christopher Fielder , Director of Product Marketing for Arctic Wolf , about:- Today’s threat landscape- MDR, MSSP, and SIEM-as-a-service- What sets Arctic Wolf apart from competitorsFor more information, contact Mira Morse (mira.morse@ingrammicro.com ) or visi...
2021-09-0917 min
PadsCast"Filipinos Need Christ Too" — with Fr. Mark Demanuele, MSSP | s2 ep17We're back! And in this (nosebleed) episode, nakasama namin ang missionary from Malta na si Fr. Mark Demanuele, MSSP. From his funny vocation story, to touching stories of mission in Canada, Pakistan, and now the Philippines, this is an episode packed with insight and fun.
2021-08-2653 min
CISO Stories Podcast (Audio)Practical Considerations for Managing Your MSSP - Johnathan Nguyen-Duy - CSP #31For many organizations, large and small, it would be impractical to "skill up" to manage all aspects of cybersecurity. Managed Security Service Providers provide many different services. Join this podcast to learn how to work with the MSSP to ensure that the organization is obtaining the most value. To view the article from the CISO COMPASS Book that sparked this interview, please visit: https://securityweekly.com/wp-content/uploads/2021/04/CISOCOMPASS_Jonathan_Nguyen-Duy_Article.pdf Nguyen-Duy, J. 2019. Managing the MSSP. In CISO COMPASS: Navigating Cybersecurity Leadership Challenges with Insights from Pioneers, 1st Ed, pg 135. Fitzgerald, T. CRC...
2021-08-1721 minThe MSP ZoneDefining MSP, MSSP, & SOCaaSWhat's an MSP? What is an MSSP? What is a SOC? These terms are common throughout the managed services community but often have overlap and can cause confusion. We will explore these terms and examine how they often present themselves in everyday business scenarios.
Highlights:
Defining MSP, MSSP, and SOC (including SOCaaS)
Business characteristics of each
Common overlaps
2021-08-0230 min
SecurityMetrics PodcastChoosing an MSSP | SecurityMetrics Podcast 28“What is managed security? It’s about trusting your business to someone else.”Whether you call it outsourcing, partnering, or hiring, choosing an MSSP is a decision that can seriously affect a business. SecurityMetrics Director of SIEM Operations and SecurityMetrics News Host, Matt “Heff” Heffelfinger, talked with Host and Principal Security Analyst Jen Stone (MCIS, CISSP, CISA, QSA) about the many factors that go into choosing the right security firm for your business. With experience at General Electric, NBC, and TJ Maxx, Heff’s breadth of knowledge and experience allow him to see threats in the long term and hel...
2021-05-1242 min
MSP 1337Transitioning to MSSP or MSsPOne MSP’s journey and transformation into an MSSP or as I like to call it MSsP. Join me as I sit down with Chad Lauderbach of Be Structured Technology Group and hear first hand what it takes.
2021-03-0933 minThe Race to Value PodcastEp 29 – Choosing Your Path in Value: Direct Contracting vs. MSSP, with Rick Goddard
ACOs are increasingly moving into two-sided risk options with MSSP BASIC E and ENHANCED. The Direct Contracting model (with both Professional and Global options) introduces new opportunities and flexibilities that are not included in other CMMI models or through the MSSP. Prospective participants must act now to evaluate their model options in preparation for the 2022 performance year, with both MSSP and DC application cycles quickly approaching. CMS will soon reopen the MSSP for the 2022 performance year, and the application period for DC’s second and final cohort is also expected to open around in Spring 2021, according to CMMI’s latest...
2021-01-251h 03Podcast – The Race to Value Podcast™Ep 29 – Choosing Your Path in Value: Direct Contracting vs. MSSP, with Rick Goddard
ACOs are increasingly moving into two-sided risk options with MSSP BASIC E and ENHANCED. The Direct Contracting model (with both Professional and Global options) introduces new opportunities and flexibilities that are not included in other CMMI models or through the MSSP. Prospective participants must act now to evaluate their model options in preparation for the 2022 performance year, with both MSSP and DC application cycles quickly approaching. CMS will soon reopen the MSSP for the 2022 performance year, and the application period for DC’s second and final cohort is also expected to open around in Spring 2021, according to CMMI’s latest...
2021-01-251h 03
MSP 1337MSP, MSSP or MSsP...Each Week we talk about a different area of Cybersecurity and how it pertains to an MSP. This week I discuss with Eric Hansen of Inland Productivity what it means to position and sell security services, The number of dashboards or panes of glass we find ourselves trying to consolidate, and whether or not that is a good idea. Last, we talk about how each of these areas put an MSP in a position of asking one simple question... do I stay an MSP or become an MSSP? I think we have come to the conclusion that all MSPs nee...
2020-12-2228 minThe MSP ZoneMSSP - Build or PartnerIf you are wanting to accelerate your steps towards offering managed security, you have a few options, including build or partner. Today’s episode discusses some of the pros and cons of both the build and partner methods. What are some of the common MSSP challenges? Should MSPs build or partner?Has Work From Home disrupted the legacy managed security deliverable? What is a SOC? Is it just a NOC with a SIEM?MSP Zone Guest: Brian Stoner, Stellar Cyber
2020-12-0929 min
2020-10-2335 min2020-10-2331 min
MSP Business SchoolJason Schaller, Anderson Zurmuehlen "MSSP's: The Wild, Wild West of Risk Assessment"Jason Schaller joins us in today's episode to discuss the importance of regular assessments and compliance reviews. Anderson Zurmuehlen started as a traditional audit and accounting firm and ultimately added technology as a division of their business. Leveraging their existing relationships where trust was established it only made sense to move into IT where trust of private information is also required. Jason is responsible for both internal security and serving as the vCISO for the AZTS technology clients. AZTS has built a strong advisory firm focused on IT governance and performing audits like SOC2 and CMMC.. Ja...
2020-09-1027 min
Desk TalksMSSP (part. Rafael Pizzolato) | Desk Talks 003#DeskTalks é o Podcast da Desk Manager Software.
Nesse episódio Bruno Sancar bate um papo com Rafael Pizzolato, sobre MSSP (Managed Security Services Provider).
Rafael Pizzolato é diretor de marketing da Starti - Fabricante líder de software de segurança de rede para Pequenas e Médias empresas no Brasil.
REFERÊNCIAS & MENÇÕES:
Site da Starti - https://www.starti.com.br
Blog da Starti - https://blog.starti.com.br/
Sobre a Conferência- https://conference.starti.com.br
Leia sobre a conferência - htt...
2019-10-0336 min
CyberCastSeason 2 - Episode 7: An MSSP in MDR's ClothingMany Managed Security Service Providers (MSSP) are attempting to deliver Managed Detection and Response (MDR) services. Few are equipped to do so. In this episode, we’ll discuss the distinctions between an MSSP and a pure play MDR provider, and how organizations can benefit from a true MDR approach.
2019-03-1300 min
HIT BreakdownHIT Breakdown 34 - Expert advice on preparing your MSSP submission
The end of the year is quickly approaching, and if you’re an Accountable Care Organization (ACO) you’ve likely already started planning for your Medicare Shared Savings Program (MSSP) submission. This process is critical to helping your organization demonstrate you’ve met the necessary quality measures to receive reimbursement from CMS at year-end.
MSSP submission, while necessary, can be somewhat complicated. To help your organization successfully navigate this complex process, Jake Aleckson, director of Optimization Solutions, and Kyle McAllister, a senior consultant on the optimization team, break down the key areas of focus for your po...
2018-11-1434 min
Managed Care CastHeard at NAACOS: Focus on Proposed MSSP ChangesCMS’ accountable care organization program, the Medicare Shared Savings Program, could potentially be undergoing some big changes. During the recent fall 2018 meeting of the National Association of ACOs, the proposed changes were top of mind. Attendees were most concerned about how the faster timeline to taking on risk would impact participation, but were pleased with changes to the benchmark and risk adjustment.
In this episode of Managed Care Cast, stakeholders at accountable care organizations (ACOs) and policy experts discuss the proposed changes and what impact they believe they will have on ACO participation.
Read more about the stories in this po...
2018-10-0918 min
Compliance Mastermind: Strategies for your healthcare compliance program and your careerCM008: Compliance and the Medicare Shared Savings Program (MSSP)Today we are talking about the Medicare Shared Savings Program. On the show I provide a short overview of the MSSP, we discuss the mandatory compliance plan elements, other regulatory requirements that are important for ACO compliance officers to be aware of and monitor, I talk about the waivers available in the MSSP, and I share my Top 10 Compliance Risks for MSSP ACOs. This is an episode that I think will be helpful for anyone working with the MSSP, not just compliance officers. Whether you are responsible for quality, care coordination, analytics, governance, or you are the A...
2017-10-1728 min
BrakeSec Education Podcast2016-036: MSSP pitfalls, with Nick Selby and Kevin JohnsonNick Selby (@nselby on Twitter) is an independent consultant who works a wide variety of jobs. During a recent engagement, he ran into an interesting issue after a company called him in to handle an incident response. It's not the client, it was with the Managed Security Service Provider (#MSSP). His blog post about the incident made big news on Twitter and elsewhere. Nick's Blog Post: https://nselby.github.io/When-Security-Monitoring-Provides-Neither-Security-Nor-Monitoring/ So, we wanted to have Nick on to discuss any updates that occurred, and also asked an MSSP owner, Kevin Johnson, from SecureIdeas (@secureideas on...
2016-09-111h 08
Enterprise Security Weekly (Audio)Enterprise Security Weekly #13 - To MSSP or not to MSSPThreat Intelligence gets funding, Security products in the cloud, incorporating virus totaling in your products, two factor authentication for voice-over IP. To MSSP or not to MSSP is the question. All that and more on Enterprise Security Weekly! Full Show Notes: http://wiki.securityweekly.com/wiki/index.php/ES_Episode13 Visit http://securityweekly.com/esw for all the latest episodes!
2016-08-2643 min