Supply Chain Security: How Moving Accountability Upstream Helps & Hurts MSSPs – Dave Sobel – CFH #29
Full Audio
View Show IndexSegments
1. Supply Chain Security: How Moving Accountability Upstream Helps & Hurts MSSPs – Dave Sobel – CFH #29
One of the most significant takeaways of the White House's recently unveiled National Cybersecurity Strategy is the assertion that software developers, OEMs, and technology service providers must bear the brunt of the responsibility -- rather than end-users -- for keeping cyber environments secure. With the looming prospect of further legislation and regulations looming that could impose greater liabilities on software products and services, MSSPs and other cyber services providers must understand where they fit into the overall scheme of things. Are MSSPs an extension of the end-user or are they one of the upstream providers who will be held accountable when cyberattacks occur? In what ways will the burdens on MSSPs be reduced or shifted due to federal efforts around coordinated vulnerability disclosure, SBOM use and other supply chain security strategies? This segment will explore these key issues.
Guest
Dave is the host of the Business of Tech podcast, and owner of MSP Radio. Dave is regarded as a leading expert in the delivery of technology services, with broad experience in both technology and business. He owned and operated an IT Solution Provider and MSP for over a decade, both acquiring other organizations and eventually being acquired. This firm was a winner of multiple awards, including being a finalist for Microsoft’s Worldwide Partner of the Year in the Small Business Specialist category. After his MSP experience, he has worked for multiple vendors at such companies as Level Platforms, GFI, LogicNow, and SolarWinds, leading community, event, marketing, and product strategies, as well as several M&A activities.
“The Business of Tech” is a leading IT services focused news and analysis podcast and YouTube show, with thousands of listeners and subscribers. He was a CRN Channel Chief, on the CRN UK A-List, a Channel Futures Circle of Excellence winner, one of Channel Pro’s 20/20 Visionaries, and has a MSPmentor 250 member for multiple times. Dave has been recognized as one of the top virtualization experts globally as a Microsoft MVP for Virtualization. Dave has served on the executive council for Managed Services and Emerging Technologies, the Vendor Advisory Council, as founding Chair for the Mobility Community for CompTIA.
Hosts
2. Sign Language: How to Write Effective Security Services Contracts – CFH #29
There's a lot that goes into the creation of a managed services contract before the client ever puts their John Hancock on the dotted line. As an MSSP, you want to make sure that expectations, for both sides of the relationship are spelled out clearly and cogently. The language within must address key terms and stipulations related to payments, roles and responsibilities, scope and scale of services, liability, and plenty more. In this segment, we'll discuss some of the most important clauses to include in your MSSP contracts, and how to avoid unfortunate omissions or vagueness that can result in confusion or disputes down the line.
Hosts
