Documenting a process leads to a specific result. If the process is well written, it will lead to a consistently positive result. Moreover, the rest of the team can follow it and reproduce your desired results. Note that all businesses already have a process, even if it’s not in writing. You teach a new team member how to reset a password using a series of actions that lead to a particular result. They can follow the process without documentation. Undocumented processes may be efficient with a small team. However, you risk Leaky Bucket Syndrome (LBS) every time you grow. LBS is the tendency to lose some knowledge as each person passes on their learning to another.

In this episode we talk with Wayne SELK from @comptia about their Cybersecurity Trustmark program for #msps #mssp and #itserviceprovider

We hear about Zero Trust, but what does it really mean. As an MSP, how can I get started or improve upon Zero Trust in my organization and with my clients? This session will help you gain a better understanding of why zero trust to some degree already exists within your organization and how you can improve upon that understanding while building or strengthening your security-first culture through a set of industry-accepted best-practices.

CompTIA Trustmarks:

https://connect.comptia.org/membership/corporate/comptia-trustmarks

Compliance as a Service (CaaS)

https://compliancerisk.io/compliance-as-a-service

Compliance Focused peer group for MSPs and MSSPs

https://compliancerisk.io/register/compliancy-consultation-program/

Help your team grow its institutional knowledge around the complexities of compliance.

Okay, I’m going to admit it: policy management doesn't have to suck. In fact, it can be a lot of fun and very rewarding. The problem is that most companies don't know how to approach their policies in a way that keeps them secure and their workers happy.

Listen to @LifecycleInsightsMSP and @compliancescorecard talk about Why policy templates set you up for failure and what you can do about it!

#policy #policymaking #cybersecurity #policytemplates #templates #sop #policymatters

Policy Process Phases consist of Alignment, Authorization, Adoption and Assessment

More from:

https://compliancerisk.io/2022/10/policy-management-doesnt-have-to-suck/

https://lifecycleinsights.io/

A Fireside chat with Sean Lardo from Connectwise, talking #pitchIT and #itnation and more

compliancerisk.io HIPAA Gap Analysis tool

Explanation of Privacy, Privacy Law and Data Protection Law

A Brief discussion about U.S. Federal Privacy and Data Protection Laws

HIPAA

GLBA

COPPA

A Brief discussion about important State Privacy and Data Protection Laws

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

New York Privacy Act

Other State Data Breach Laws

ABrief discussion about EU Data Protection Laws

GDPR

EU Cookies Directive

Most MSP SMB customers have little or no idea why compliance is important, even required, and why they should pay for it. More than just filling out forms, compliance is a way to make your clients more secure, to reduce the possibility of and likelihood of cyber attacks. This will help them reduce their costs and grow their businesses while allowing you to prove the value of your services. Learn ways to rapidly complete an assessment, create policies and produce a gap analysis to show your clients where they are most vulnerable. Turn Compliance into a chargeable service.

Read more https://compliancerisk.io/

Every client today has some amount of cyber security risk - some clients have minor issues, while most have major gaps - and don’t even know it. For 30 minutes, we will discuss how to quickly and efficiently identify risks, communicate with your clients the why’s and how’s to mitigate those risks. How to measure improvements in your clients’ security posture.

Read more at https://compliancerisk.io/

Morning chat with Steve and Tim about the upcoming session on Creating a Compliance Process

Register here: https://rmcres.zoom.us/webinar/register/6116463316768/WN_JETnUjzTQDiNpayYnNZLxQ

As an MSP’s or vCISO, how well do you really know your client's business? How does their cyber security posture impact their business and profits? How Business Impact Analysis (BIA) can help you better understand your clients and how you can better help them. Come join cyber security experts to discuss how to know your clients better and how to profit from that knowledge. https://compliancerisk.io/