ABOUT THIS PODCAST 🔗
Get NIST-y is a podcast that breaks compliance out of the checkbox trap and turns it into a real security advantage. No fluff, no FUD—just practical strategies to make compliance work for your MSP. Each week, we'll dive into compliance topics based on real questions from our MSP partners and subscribers.
Update frequency:
weekly
Average audio length:
30 minutes
Guest interviews
English
United States
60 episodes
since Sept. 2, 2025
episodic
LATEST EPISODE 🔗
Blacksmith InfoSec, Lemhi, and Synthreo are the three PitchIT finalists headed to the stage at IT Nation Connect.
So naturally, we invited John Harden and Callen Sapien onto Get NIST-y and tried to start a fight.
It...sort of worked.
John, Callen, Mike, and Jared get into AI liability, agent rot, w…
PREVIOUS EPISODES 🔗
Your client asked you to delete an ex-employee's data. The mailbox is gone, but copies are still sitting in backups. So what exactly did you just promise?
Jared and Mike talk deletion, retention and the limits of "storage is cheap" on Get NIST-y, the cybersecurity and compliance podcast …
Your client knows about the security gap. They understand the recommendation. And they still say no.
Now what?
This week on Get NIST-y, Jared and Mike talk about when risk acceptance is legitimate, when it still means the client isn't compliant, who actually has authority to sign off on company ris…
Following NIST or CIS is useful, but does it prove your MSP can actually operate under pressure? Chris "CJ" Johnson from GTIA joins us to talk about the Cybersecurity Trustmark, what security maturity looks like in practice, and why proof of controls is not the same as mature governance.
…
Antivirus, backups, and MFA are a start. They won't tell you how payroll runs when the check printer is inaccessible or keep your risk register current six months later. This week, Jared and Mike talk about what a small business actually needs and how to keep that work going.
- Identify the client…
It started with one questionnaire. Now you're the compliance department, and apparently that's included in the flat rate. On Get NIST-y, Blacksmith InfoSec's cybersecurity and compliance podcast for MSPs, we're talking about who owns the program and who pays for the work.
- Name one executive owne…
AI adoption happened before most clients wrote the rules. That does not make an AI policy useless. It changes the job from trying to stop AI to governing the tools already in use, training people to make better decisions, and protecting sensitive data.
Takeaways:
- Why governance, education, and s…
Following NIST does not automatically cover New York-specific rules, and that does not mean your MSP needs to become a law firm. We sort out where legal counsel belongs, what the client must own, and which responsibilities an MSP can safely take on. We also thank our listeners for helping Get NIST-…
Open source is already in your stack, whether you deliberately installed it or not. In this ChannelCon 2026 talk, Jared lays out a practical way for MSPs to decide what deserves trust, what needs guardrails, and what needs to go.
Takeaways:
• Scope the risk by asking what the software touches and …
Cyber insurance questionnaires ask businesses to make definitive claims about security controls they may not even understand. Spectra Cyber founder and CEO Edouard von Herberstein joins Michael at ChannelCon to talk about why insurers need better evidence, not longer forms.
Takeaways:
• Why easier…
Disclaimer: The podcast and artwork embedded on this page are from Blacksmith InfoSec, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
PODCAST SEARCH ENGINE
You can use our website to search 3,827,257 podcasts and 196,198,192 episodes by people, places, or topics.
An investment in knowledge pays the best interest, so I listen to podcasts.
‐ Benjamin "Llamacorn" Franklin
CLAIM THIS PODCAST
Why to claim podcasts?
If you are a podcaster, the best way to manage your podcasts on Listen Notes is by claiming your Listen Notes
podcast pages.
It is a great, free way to engage the podcast community and increase the visibility of your podcasts.
After claiming your Listen Notes podcast pages, you will be able to:
✓
Manually refresh the RSS feed to sync up
✓
Get a verified badge (
✓
) alongside with your podcast name on Listen Notes
✓
Post classified ads for sponsorship,
guests, co-hosts,
cross-promotion...
✓
Respond to listener comments on Listen Notes
✓
Use speech-to-text techniques to transcribe your show and
edit transcripts
✓
Improve the presence of your podcasts, e.g., self-service
podcaster interview...
✓
If you share your Listen Notes page and at-mention @ListenNotes
on X (formerly Twitter),
our official X (formerly Twitter) account will retweet to promote
your show to our followers.
Coming soon:
◯ Self-service promotion on Listen Notes
◯ Track your podcast stats on Listen
Notes, e.g., listens, page
views...
◯ Manage episodes
EDIT
Thank you for helping to keep the podcast database up to date.
