OM DENNE PODCAST 🔗

Opdateringsfrekvens:
weekly
Gennemsnitlig lydlængde:
29 minutes
Gæsteinterviews
Engelsk
USA
61 episoder
siden 2. september 2025
episodic

SENESTE EPISODE 🔗

The client bought the AI tool, the MSP enabled it, and six months later nobody can say who approved what. Ignacio sent us a question about who owns those settings and what needs to be in writing. Then we get into when a client is too risky to keep, because you won't have much of a business left if …

SØG BLANDT TIDLIGERE EPISODER

Søg efter gamle afsnit af Get NIST-y.

SIDSTE EPISODER

Blacksmith InfoSec, Lemhi, and Synthreo are the three PitchIT finalists headed to the stage at IT Nation Connect. So naturally, we invited John Harden and Callen Sapien onto Get NIST-y and tried to start a fight. It...sort of worked. John, Callen, Mike, and Jared get into AI liability, agent rot, w…
Your client asked you to delete an ex-employee's data. The mailbox is gone, but copies are still sitting in backups. So what exactly did you just promise? Jared and Mike talk deletion, retention and the limits of "storage is cheap" on Get NIST-y, the cybersecurity and compliance podcast …
Your client knows about the security gap. They understand the recommendation. And they still say no. Now what? This week on Get NIST-y, Jared and Mike talk about when risk acceptance is legitimate, when it still means the client isn't compliant, who actually has authority to sign off on company ris…
Following NIST or CIS is useful, but does it prove your MSP can actually operate under pressure? Chris "CJ" Johnson from GTIA joins us to talk about the Cybersecurity Trustmark, what security maturity looks like in practice, and why proof of controls is not the same as mature governance. …
Antivirus, backups, and MFA are a start. They won't tell you how payroll runs when the check printer is inaccessible or keep your risk register current six months later. This week, Jared and Mike talk about what a small business actually needs and how to keep that work going. - Identify the client…
It started with one questionnaire. Now you're the compliance department, and apparently that's included in the flat rate. On Get NIST-y, Blacksmith InfoSec's cybersecurity and compliance podcast for MSPs, we're talking about who owns the program and who pays for the work. - Name one executive owne…
AI adoption happened before most clients wrote the rules. That does not make an AI policy useless. It changes the job from trying to stop AI to governing the tools already in use, training people to make better decisions, and protecting sensitive data. Takeaways: - Why governance, education, and s…
Following NIST does not automatically cover New York-specific rules, and that does not mean your MSP needs to become a law firm. We sort out where legal counsel belongs, what the client must own, and which responsibilities an MSP can safely take on. We also thank our listeners for helping Get NIST-…
Open source is already in your stack, whether you deliberately installed it or not. In this ChannelCon 2026 talk, Jared lays out a practical way for MSPs to decide what deserves trust, what needs guardrails, and what needs to go. Takeaways: • Scope the risk by asking what the software touches and …
Ansvarsfraskrivelse: Podcasten og kunstværket, der er indlejret på denne side, er fra Blacksmith InfoSec, som tilhører dens ejer og ikke er tilknyttet eller godkendt af Listen Notes, Inc.