MSP 1337 | Cybersecurity Education and Security Guidance

Oct 20, 2026

Who Gave AI the Keys? Cybersecurity, Governance, Access, and Control in the Age of AI Agents

AI agents are quickly becoming part of everyday business operations, but many organizations are deploying them without the governance controls they need for human employees. In this episode, Brian Kelly, Founder of Automated Edge, explores the risks of giving AI broad access to business systems, data, and credentials without adequate oversight. With more than two decades in the MSP space, Brian explains why unrestricted AI access creates security, privacy, and accountability challenges most organizations still haven't addressed. The conversation examines practical approaches to AI governance,

Oct 13, 2026

Your Biggest Cybersecurity Risk May Be Accounting

In this episode, Chris Johnson and Baxter Lanius of Alternative Payments explore the overlooked connection between payment security, PCI compliance, and financial resilience. Many ITSPs unknowingly increase their risk by storing payment information internally, creating compliance challenges and expanding their attack surface. The discussion highlights how modern payment platforms can reduce risk, why billing discipline directly impacts profitability, and which financial controls can help protect business operations when accounts or credentials are compromised. Topics include ACH debit blockers

Oct 6, 2026

Why Your Security Stack Might Be Your Biggest Vulnerability

Why Threat Actors might love your security stack... Surprisingly, the most dangerous thing in your organization might be the security tools you're paying for but never configured. Chris Johnson and Zach Kromkowski revealed at CornCon26 that one organization purchased a tool and left it completely unimplemented for two years, creating a false sense of security while attackers exploited the gaps. The core insight here is uncomfortable but important: most cybersecurity breaches stem from foundational failures that have existed for decades, not from sophisticated new attacks. Organizations keep ch

Sep 29, 2026

Through AI Governance, MSPs Can Lead Safe and Scalable Adoption

AI adoption is moving fast, but governance is struggling to keep up. In this episode, Chris sits down with Ignacio Lopez, founder of Work-Smart.AI and Fractional Head of AI, to discuss how MSPs can help clients move from AI experimentation to secure, scalable adoption. Drawing on his experience in auditing, risk management, and enterprise technology, Ignacio explains why governance must come before tools. They explore AI policies, connector risks, access controls, model governance, data foundations, token economics, and the growing threat of shadow AI. Ignacio shares a practical roadmap for MS

Sep 22, 2026

Cybersecurity Maturity and the Myth of Perfection

Special Host: Adam Anderson from Threat Captain. What does success look like in an industry where technology changes faster than anyone can predict? In this episode of MSP1337, Chris Johnson (GTIA) and Charles Love (Showtech Solutions) join Adam Anderson from Threat Captain for a wide-ranging conversation on cybersecurity maturity, business growth, client communication, and preparing for an AI-driven future. The discussion challenges the idea that MSPs need to be perfect before making progress. Instead, the panel explores why cybersecurity maturity is a journey, how trust is built through clea

Sep 15, 2026

Deepfakes, Data Poisoning, and the Governance Gap

In this episode of MSP 1337, Chris sits down with Dr. Stephen Wright of Macadamia Solutions, a rare expert whose career spans technology, law, and business. Together they explore why governance has become the defining challenge of the AI era and why many organizations remain dangerously unprepared. The conversation examines how regulatory requirements, cybersecurity obligations, and emerging AI risks are reshaping boardroom accountability. Dr. Wright breaks down the growing threat of deepfakes, data poisoning, and data suppression, explaining how attackers increasingly target data integrity an

Sep 8, 2026

Trust but Verify Isn't Enough in the Age of AI

Every vendor has an AI roadmap. Every client has employees experimenting with AI. And increasingly, MSPs are building their own AI solutions. The challenge is that few organizations fully understand the risks that accompany this rapid adoption. In this episode of MSP 1337, Chris Johnson and Jim Harryman discuss what responsible AI deployment actually looks like. They explore AI governance, vendor accountability, security testing, client readiness, and the dangers of allowing AI unrestricted access to sensitive information. Rather than treating AI as a shortcut, they argue for a disciplined app

Sep 2, 2026

Your Backup Plan Isn't a Recovery Plan

Many MSPs and businesses believe they're prepared for an outage because they have backups, redundant internet connections, or cloud-based applications. In reality, most recovery strategies fall apart when tested in real-world scenarios. In this episode of MSP 1337, Chris Johnson sits down with Charles Love of Showtech Solutions to explore the dangerous gap between perceived resilience and actual preparedness. They discuss why incident response plans must come before tabletop exercises, how internet redundancy often fails under scrutiny, and why MSPs should treat their own operational dependenc

Aug 25, 2026

Stop Waiting. Start Securing.

Most MSPs don't have a compliance problem. They have a starting problem. Michael Zbarsky of Blacksmith InfoSec joins MSP1337 to challenge some of the biggest misconceptions surrounding compliance, security frameworks, and cybersecurity maturity. From the GTIA Cybersecurity Trustmark and CMMC to evidence automation and third-party assessments, the discussion focuses on what actually moves organizations forward and what keeps them stuck. Michael shares why "good enough" today is often better than "perfect" next year, why automation cannot replace human judgment, and why MSPs are uniquely positio

Aug 18, 2026

Why ITSPs Must Lead With AI Governance

The MSP market is changing fast. Clients can buy technology anywhere, automate routine tasks, and access powerful AI tools with just a few clicks. The real question is no longer what technology you sell. It's whether you can help clients manage the business risks that technology creates. This week, Chris Johnson welcomes back Auggie Staab from TD SYNNEX to discuss the next evolution of managed services. Together they explore how AI is disrupting traditional service delivery, creating new compliance and cybersecurity challenges, and forcing MSPs to rethink their value proposition. From shadow A

Aug 11, 2026

Specialize, Scale, Succeed: The Future of MSP Growth with MJ Patent

In this episode, Chris sits down with MJ Patent to explore the foundational principles that help Managed Service Providers grow, mature, and thrive in today's increasingly complex IT and cybersecurity landscape. Drawing from her extensive experience working with service providers of all sizes, MJ explains why many MSPs struggle to scale evenly across their business and why success starts with understanding exactly who you serve, the problems you solve, and the value you create. Together, they discuss the dangers of chasing every new technology trend, the importance of specialization, and how s

Aug 4, 2026

The Human Side of Risk Isn't Human Error

Human risk has become one of the most challenging and misunderstood aspects of cybersecurity. In this episode of MSP 1337, Chris Johnson sits down with Nihil Morjaria from usecure to explore why traditional security awareness training is no longer enough and what it takes to build a truly proactive human risk management strategy. The conversation examines how MSPs and ITSPs are evolving beyond technology management into governance, risk, and compliance, and why understanding user behavior is now just as important as managing firewalls and endpoints. Chris and Nihil discuss the limitations of o

Jul 21, 2026

The Foundation Beneath Good Cybersecurity

In this episode of MSP 1337, episode 300, Chris Johnson sits down with Matt Lee for a candid fireside chat on one of the most misunderstood topics in business and cybersecurity: governance. Using relatable examples, from concrete truck deliveries to vacuuming a floor, Matt breaks down why governance isn't about policies, paperwork, or compliance checklists. It's about setting clear goals, assigning accountability, managing risk, and ensuring everyone works toward the same outcome. The conversation explores why governance has historically been treated as an afterthought in IT and security, why

Jul 15, 2026

Cybersecurity Has A Noise Problem

Most organizations don't have a security tool problem, they have a signal-to-noise problem. Chris and Tatum Treadwell dive into the realities of securing decades-old technologies against modern attackers, the rise of AI-enhanced social engineering, and the growing challenge of alert fatigue. The conversation explores why education, human judgment, and meaningful action matter more than flashy marketing claims, offering MSPs a practical perspective on building resilience in an increasingly complex threat environment.

Jul 6, 2026

Your Phone is the Weakest Link

Everyone talks about email phishing, ransomware, and endpoint security, but one of the most dangerous attack vectors is sitting in your pocket. In this episode of MSP1337, Chris Johnson sits down with Mark Kreitzman of Efani to expose the growing threat of SIM swapping, mobile account takeovers, and the hidden security gaps traditional carriers have failed to solve. They explore why mobile numbers remain a critical trust anchor for banking, MFA, and identity verification, how carrier business models contribute to risk, and what individuals and organizations can do to better protect themselves.

Jun 30, 2026

Measuring What Matters in Cybersecurity Maturity

The cybersecurity industry loves to sell tools. What it rarely talks about is the hard work required to make those tools effective. In this episode, Jim Harryman joins Chris to challenge the idea that technology alone creates security. They discuss why mature organizations focus on governance, accountability, documentation, policies, review cycles, and operational discipline long before they look for the next shiny solution. If you've ever mistaken a technology purchase for progress, this conversation may be the reality check your organization needs.

Jun 23, 2026

Your Passport Isn’t the Problem, Your Security Habits Are

Planes, hotels, and conference stages aren’t what put you at risk, it’s what you bring with you. In this episode, Dawn Sizer of 3rd Element dives into the real reasons traveling professionals become easy targets: weak policies, poor communication, unsecured devices, and total blind spots around personal data exposure. From conditional access headaches to rideshare risks and AI policy chaos, this is a practical, no-excuses look at how security breaks down in the real world, and what you need to fix before your next trip.

Jun 16, 2026

From Reactive Security to Continuous Intelligence

This episode explores how cybersecurity is evolving from point-in-time assessments to continuous, intelligence-driven operations. Galina Kho of Cyberbay shares how predictive analytics, crowdsourced ethical hackers, and AI are reshaping how organizations understand and manage risk. We discuss how to scale security without adding headcount, why human expertise remains essential, and how governance and trust underpin effective security ecosystems. The result is a clearer model for modern cybersecurity, proactive, collaborative, and built for constant change.

Jun 9, 2026

Taking Advantage of GTIA Resources for Lasting Business Impact

In this special episode of MSP 1337, CJ is joined by Brooke Lee (Rev.io) and Stacey Whitley (GTIA) to unpack how ITSPs can translate industry engagement into measurable outcomes. Attending events is easy, but most organizations struggle to turn what they learn into real operational outcomes. Brooke and Stacey share how their collaborative event recap initiative is helping bridge that gap by distilling key takeaways from major channel events into practical, accessible insights. More importantly, they highlight how GTIA serves as the connective tissue that sustains momentum beyond the event, ena

Jun 2, 2026

Simplifying Risk Assessments for Real Cybersecurity Impact

In this episode, Josh Hohbein of CentrexIT breaks down a practical, MSP-centric approach to risk assessments that moves beyond complex, consultant-driven reports and toward clear, actionable business outcomes. He shares how combining vulnerability scans, client interviews, and system configuration reviews, anchored in a cyber maturity model, helps MSPs translate technical findings into meaningful risk conversations, especially during onboarding. The discussion highlights the importance of ownership, communication, and collaboration in managing inherited client risk, while previewing a live dem