MSP 1337 | Cybersecurity Education and Security Guidance
by Chris Johnson | Cybersecurity Education & Security Guidance
Educational sound bytes to help MSPs and their clients navigate Cybersecurity and AI Governance. Cybersecurity maturity is a journey; don't go it alone. Interviews and guidance from fellow MSPs and other Industry experts.Our goal is Secure Outcomes, and together we can make a difference.
Episodes
-
When AI Agents Became Cybersecurity's Biggest Blind Spot
Imagine your organization deploying thousands of digital workers that can cross every boundary your security team built, all at once, without any malicious intent. That is the reality Neelima Rustagi from Metano.ai describes in this conversation with host Chris Johnson on MSP 1337. Neelima brings...
-
Who Gave AI the Keys? Cybersecurity, Governance, Access, and Control in the Age of AI Agents
AI agents are quickly becoming part of everyday business operations, but many organizations are deploying them without the governance controls they need for human employees. In this episode, Brian Kelly, Founder of Automated Edge, explores the risks of giving AI broad access to business systems,...
-
Your Biggest Cybersecurity Risk May Be Accounting
In this episode, Chris Johnson and Baxter Lanius of Alternative Payments explore the overlooked connection between payment security, PCI compliance, and financial resilience. Many ITSPs unknowingly increase their risk by storing payment information internally, creating compliance challenges and...
-
Why Your Security Stack Might Be Your Biggest Vulnerability
Why Threat Actors might love your security stack... Surprisingly, the most dangerous thing in your organization might be the security tools you're paying for but never configured. Chris Johnson and Zach Kromkowski revealed at CornCon26 that one organization purchased a tool and left it completely...
-
Through AI Governance, MSPs Can Lead Safe and Scalable Adoption
AI adoption is moving fast, but governance is struggling to keep up. In this episode, Chris sits down with Ignacio Lopez, founder of Work-Smart.AI and Fractional Head of AI, to discuss how MSPs can help clients move from AI experimentation to secure, scalable adoption. Drawing on his experience…
more -
Cybersecurity Maturity and the Myth of Perfection
Special Host: Adam Anderson from Threat Captain. What does success look like in an industry where technology changes faster than anyone can predict? In this episode of MSP1337, Chris Johnson (GTIA) and Charles Love (Showtech Solutions) join Adam Anderson from Threat Captain for a wide-ranging...
-
Deepfakes, Data Poisoning, and the Governance Gap
In this episode of MSP 1337, Chris sits down with Dr. Stephen Wright of Macadamia Solutions, a rare expert whose career spans technology, law, and business. Together they explore why governance has become the defining challenge of the AI era and why many organizations remain dangerously…
more -
Trust but Verify Isn't Enough in the Age of AI
Every vendor has an AI roadmap. Every client has employees experimenting with AI. And increasingly, MSPs are building their own AI solutions. The challenge is that few organizations fully understand the risks that accompany this rapid adoption. In this episode of MSP 1337, Chris Johnson and Jim...
-
Your Backup Plan Isn't a Recovery Plan
Many MSPs and businesses believe they're prepared for an outage because they have backups, redundant internet connections, or cloud-based applications. In reality, most recovery strategies fall apart when tested in real-world scenarios. In this episode of MSP 1337, Chris Johnson sits down with...
-
Stop Waiting. Start Securing.
Most MSPs don't have a compliance problem. They have a starting problem. Michael Zbarsky of Blacksmith InfoSec joins MSP1337 to challenge some of the biggest misconceptions surrounding compliance, security frameworks, and cybersecurity maturity. From the GTIA Cybersecurity Trustmark and CMMC to...
-
Why ITSPs Must Lead With AI Governance
The MSP market is changing fast. Clients can buy technology anywhere, automate routine tasks, and access powerful AI tools with just a few clicks. The real question is no longer what technology you sell. It's whether you can help clients manage the business risks that technology creates. This…
more -
Specialize, Scale, Succeed: The Future of MSP Growth with MJ Patent
In this episode, Chris sits down with MJ Patent to explore the foundational principles that help Managed Service Providers grow, mature, and thrive in today's increasingly complex IT and cybersecurity landscape. Drawing from her extensive experience working with service providers of all sizes, MJ...
-
The Human Side of Risk Isn't Human Error
Human risk has become one of the most challenging and misunderstood aspects of cybersecurity. In this episode of MSP 1337, Chris Johnson sits down with Nihil Morjaria from usecure to explore why traditional security awareness training is no longer enough and what it takes to build a truly…
more -
The Foundation Beneath Good Cybersecurity
In this episode of MSP 1337, episode 300, Chris Johnson sits down with Matt Lee for a candid fireside chat on one of the most misunderstood topics in business and cybersecurity: governance. Using relatable examples, from concrete truck deliveries to vacuuming a floor, Matt breaks down why...
-
Cybersecurity Has A Noise Problem
Most organizations don't have a security tool problem, they have a signal-to-noise problem. Chris and Tatum Treadwell dive into the realities of securing decades-old technologies against modern attackers, the rise of AI-enhanced social engineering, and the growing challenge of alert fatigue. The...
-
Your Phone is the Weakest Link
Everyone talks about email phishing, ransomware, and endpoint security, but one of the most dangerous attack vectors is sitting in your pocket. In this episode of MSP1337, Chris Johnson sits down with Mark Kreitzman of Efani to expose the growing threat of SIM swapping, mobile account takeovers,...
-
Measuring What Matters in Cybersecurity Maturity
The cybersecurity industry loves to sell tools. What it rarely talks about is the hard work required to make those tools effective. In this episode, Jim Harryman joins Chris to challenge the idea that technology alone creates security. They discuss why mature organizations focus on governance,...
-
Your Passport Isn’t the Problem, Your Security Habits Are
Planes, hotels, and conference stages aren’t what put you at risk, it’s what you bring with you. In this episode, Dawn Sizer of 3rd Element dives into the real reasons traveling professionals become easy targets: weak policies, poor communication, unsecured devices, and total blind spots around...
-
From Reactive Security to Continuous Intelligence
This episode explores how cybersecurity is evolving from point-in-time assessments to continuous, intelligence-driven operations. Galina Kho of Cyberbay shares how predictive analytics, crowdsourced ethical hackers, and AI are reshaping how organizations understand and manage risk. We discuss how...
-
Taking Advantage of GTIA Resources for Lasting Business Impact
In this special episode of MSP 1337, CJ is joined by Brooke Lee (Rev.io) and Stacey Whitley (GTIA) to unpack how ITSPs can translate industry engagement into measurable outcomes. Attending events is easy, but most organizations struggle to turn what they learn into real operational outcomes.…
more -
Simplifying Risk Assessments for Real Cybersecurity Impact
In this episode, Josh Hohbein of CentrexIT breaks down a practical, MSP-centric approach to risk assessments that moves beyond complex, consultant-driven reports and toward clear, actionable business outcomes. He shares how combining vulnerability scans, client interviews, and system…
more -
Vulnpocalypse Isn’t Coming, It’s Already Breaking Your Patch Cycle
In this MSP1337 fireside chat, you and Matt Lee unpack the idea of a “vulnpocalypse”, a rapidly emerging reality in which AI-driven tools are accelerating vulnerability discovery at a pace organizations can't keep up with. While much of the industry is focused on the fear and hype, the…
more -
Governance, Risk, Compliance (GRC), and the MSP Wake-up Call
In this episode, Chris Johnson sits down with Eric Shoemaker of Genius GRC to unpack one of the most misunderstood shifts in the MSP space: the move from tool-driven cybersecurity to standards-aligned governance, risk, and compliance programs. Eric explains why Genius GRC isn’t a software…
more -
The New Reality for MSP Security Operations Center Services
In this episode of MSP1337, Chris Johnson is joined by Jeff Majka, founder of Security Bulldog, to unpack why MSP‑delivered SOC services are at a breaking point, and how AI and automation are forcing a reset. They explore why traditional tiered SOC models and white‑label thinking no longer scale,...
-
Guardrails, Drift, and Evidence: Cybersecurity Maturity is Continuous Improvements
Chris Johnson sits down with Ido Green of Espresso Labs to explore how AI and local agents can reduce cybersecurity noise, offload Level 1 work, and continuously enforce compliance, without losing human control. They discuss guardrails for safe automation, multi-vendor telemetry, drift detection,...
-
Selling Cybersecurity to Skeptical Clients and Prospects
A sit-down with Hamid Ganadan, author of “Not Buying It: The Art of Selling to Scientists, Doctors, and Other Professional Skeptics,” on how MSPs can sell to skeptical, highly educated buyers. This is an exploration of the psychology of decision-making, shifting prospects from skepticism to...
-
Compliance is the floor, not the ceiling
In this episode of MSP 1337, Chris Johnson sits down with Jim Harryman to break down why passing audits doesn’t equal real security, and why MSPs get into trouble when frameworks turn into checklists. Drawing from firsthand experience with SOC 2 Type 2, CIS Controls, and the GTIA Cybersecurity...
-
Cybersecurity Maturity Beyond Tools
Most MSPs don’t fail at cybersecurity because of missing tools; they stall because they miss the maturity inflection point where governance must replace tactics. In this episode, we break down what actually defines cybersecurity maturity, contrasting technical frameworks with governance-driven...
-
E&O, Cyber Insurance, and the Illusion of Risk Transfer for MSPs
In this episode, we unpack one of the most misunderstood topics in the MSP industry: insurance. From Errors & Omissions to cyber insurance, we break down what these policies actually cover, and more importantly, what they don’t. The conversation challenges the assumption that buying insurance...
-
Why Communication, Not Cybersecurity, Is the Real ITSP Problem
Clear communication is one of the most overlooked and most costly challenges in IT service providers. In this episode, Chris sits down with Amy Reczek, communication and presence expert, to unpack why misalignment happens between leadership, teams, and clients, and how understanding the “why”...
-
Installing or Configuring Is Just Not Enough
The critical importance of going beyond just getting technology to work, addressing the underlying security, scalability, and proper implementation, rather than just fixing symptoms. Eric Hansen, of Inland Productivity Solutions, emphasized the importance of starting troubleshooting at the very...
-
GTIA On Location Interview: A Phishing Expedition and Cybersecurity Maturity
A real-world phishing incident. Real financial impact. Real lessons for MSPs. In this episode, we unpack a phishing attack that led to unauthorized access to an Azure subscription and significant financial loss for an MSP client. The conversation goes beyond the incident itself to examine where...
-
Suspended, Hacked, or Outbid - Cybersecurity and Marketing, Can They Co-exist?
Google Ads can disappear overnight, and for millions of businesses, it has. In this episode, John Horn of Stub Group breaks down the growing cybersecurity risks behind Google Ads account suspensions and why 39 million accounts were shut down in 2024. We explore Google’s automated, all‑or‑nothing...
-
Operational Maturity Meets Cybersecurity
Cybersecurity maturity isn’t earned in audits, it’s earned in the operational moments where governance either shows up… or it doesn’t. Today’s conversation with Mike Stewart of Anchor Networks goes deep on MSP maturity. How leadership tone, culture, and repeatable decision systems turn policies...
-
AI Governance and the MSP Maturity Model
Managed Service Providers are being pushed to “get compliant fast.” In my discussion with Bruno Leqoc, we reframe the challenge. Compliance isn’t security, and lasting compliance depends on security maturity first. Highlighting how AI policy can extend existing governance frameworks, why…
more -
Governing AI in a High Risk World
Exploring the fast-moving intersection of AI governance, ethics, and cybersecurity, examining how organizations are struggling to adopt AI responsibly while keeping pace with innovation. The conversation highlights a growing disconnect between enthusiasm for AI tools and the absence of clearly...
-
Do Phishing Simulations Really Work?
Phishing simulations are one of the most debated tools in cybersecurity awareness, but do they actually work? In today’s episode, we’re joined by David Shipley, former soldier turned cybersecurity researcher and founder of Beauceron Security, to unpack what the data really says about phishing...
-
Physical Safeguards and Process and Procedures
Have you ever been stuck in an elevator? What happens when you push the call button? Physical safeguards managed by a 3rd party are often ignored or marked as N/A. What happens when processes and procedures don't get updated after a change? Listen in as Charles Love of ShowTech Solutions shares…
more -
Data Privacy and Security Trends in 2026
A much-needed discussion on the fast‑shifting world of data privacy in 2026 and what it means for MSPs on the front lines. From the tangled web of U.S. state privacy laws to the rising risks hidden in modern data flows (yes, even your car!), guest Andy Sambandam, Clarip CEO & Founder, lays out…
more -
Exploring AI Usage, Misconceptions, and of course Security Concerns
In this episode, we cut through the AI hype with Alane Boyd to unpack what MSPs really need to know about today’s AI landscape. We cut right to the chase on data‑privacy pitfalls and free-tool misconceptions, and on the rise of AI agents that go far beyond simple automation. We explore practical,...
-
Human Behavior and Shifting from Security Awareness to Appreciation
Chris Johnson and cybersecurity expert Robert Siciliano dive into the human side of security, exploring why default trust and denial make people vulnerable to social engineering and cyber threats. They discuss the cultural framing of security, the importance of personalizing security practices…
more -
ITSP Reslience in 2026
Resilience and Continuous Improvement for ITSPs as we go into 2026. I discuss what it means to be on a resilience journey with Charles Love of ShowTech Solutions. ShowTech Solutions has reached a milestone in its maturity journey, achieving Assured status, and continues to advance its maturity...
-
December Series 2025 Wrapup
Predictions and challenges in the technology and cybersecurity space for 2026, with a focus on Microsoft ecosystem changes, licensing, security, and the impact of AI and Copilot. I had a chance to catch up with Shay Cohen of Optimize365.io this week, and I think you will find his insights on the...
-
Data, Security, and The Human Edge
In 2026, AI will increasingly integrate into business processes, emphasizing strong data quality and security as prerequisites for success. AI agents, distinct from chatbots, will operate with machine identities to automate tasks while supporting, rather than replacing, human decision-making.…
more -
Look Ahead Part 3
Looking ahead to 2026 trends and challenges in the MSP (Managed Service Provider) space, focusing on AI, automation, security, risk management, and social engineering. In a conversation with Josh Hohbein of Centrex IT, we discussed the key challenges and opportunities as we enter 2026.
-
Risk Management In 2026?
Predictions for the Managed Service Provider (MSP) cybersecurity landscape in 2026, with a focus on risk management, the continued importance of basic cyber hygiene, open-source adoption, and the strategic use of risk registers. Did I say Risk Register? Dom Kirby brings it home: the importance of...
-
Cybersecurity Spend Decisions For 2026
I sat down with Chris Loehr to discuss the varying approaches businesses are taking toward cybersecurity spending as they plan for 2026, highlighting the influence of private equity and the unpredictability in budget increases or reductions even within the same industry.
-
Just Sell Me The Minimum
From what keeps us up at night, to just meeting the minimums and nothing more to be compliant. Dorota Ulkowska of Accurate Networks and I discuss the recurring challenge of clients, tiny businesses, resisting recommended cybersecurity practices due to cost, perceived inconvenience, or a belief…
more -
Cybersecurity and Simplicity
Sitting down with Bobby Glen James of Boteka about the importance of simplicity in IT security for MSPs. Bobby shares lessons from decades in the industry, advocating for Lean IT practices, streamlined technology stacks, and a service-first approach that avoids hardware upselling and long-term...
-
DNS Records: Secure and Correct?
By the end, it is hard to believe that in 2025, less than 30% of all Web Domains have properly configured SPF, DMARC, and DKIM records. Yep, less than 30% of the top 10 million domains. I sit down with Al Iverson of Valimail to talk about DNS records and the importance of SPF, DMARC, and DKIM...
About this show
Educational sound bytes to help MSPs and their clients navigate Cybersecurity and AI Governance. Cybersecurity maturity is a journey; don't go it alone. Interviews and guidance from fellow MSPs and other Industry experts.Our goal is Secure Outcomes, and together we can make a difference.
Hosted by
Chris Johnson | Cybersecurity Education & Security Guidance
Categories