Elephant in the Room
EITR 52: Vendor Risk Management for MSPs: Somewhere Between Nothing and a Compliance Cult

MSPs hold the keys to their clients’ kingdoms, and your vendors hold the keys to you. The recent SkyKick incident made that hard to ignore. Yet most MSPs either assume a tool is safe because everyone uses it, keep a vendor spreadsheet nobody opens, or pay for a 300-question questionnaire program that’s too heavy to ever use.

Josh Hohbein joins hosts Kyle Christensen and Alex Farling to lay out a practical middle path. You’ll learn how to:

• Tier vendors by security exposure using four simple yes/no questions

• Match your effort to the tier, so your RMM gets scrutiny and your coffee subscription doesn’t

• Write exit plans for the vendors you can’t live without

• Find and remove forgotten apps still connected to your clients’ Microsoft 365 tenants

Josh also makes the case for the one question every vendor should answer, “How do you keep my data safe?”, and how to tell a real answer from a canned one. You’ll leave with a one-page worksheet you can use the same day.

https://www.crowdcast.io/c/eitr/37-pda40p