This week, we’re diving into three huge shifts happening in the Microsoft ecosystem that every MSP should have on their radar:

·      Token Protection is now available for Entra ID P1 licenses — and it’s a game changer for securing identity tokens and stopping session hijacking.

·      GDAP — the move from legacy DAP to Granular Delegated Admin Privileges — is creating both confusion and opportunity for MSPs managing multiple tenants.

·      And for those preparing for Right of Boom 2026, Kelvin Tegelaar is here to talk about launching the first CIPP bootcamp — helping MSPs and vCISOs go deeper on Microsoft security and compliance.

Kelvin’s not just anyone — he’s the founder of CIPP and Lime Networks, a 7-time Microsoft MVP, and one of the clearest voices in the channel when it comes to bridging technical complexity and real-world MSP operations.

Co-hosts: Brian Blakely, CRO of Compliance Scorecard & Nick Ross, CEO of CloudCapsule.

Big news for the defense and MSP community:

The 48 CFR CMMC final rule has officially reached OMB review.
This is the second-to-last milestone before publication in the Federal Register — and we’re expecting to see the final rule land by October with no 60-day delay. 

Translation? The phased rollout begins Q4 2025.
If you work with defense contractors, or your clients do, the countdown just got very real.

This week on The CyberCall (1pm EDT - URL in comments), we’ve got Jacob Horne, one of the most trusted voices on CMMC, breaking down:

• What this milestone means for MSPs and contractors
• How the phased rollout will actually work
• Immediate actions to take to avoid last-minute chaos

Co-hosts: Joy Beland, VP of Compliance at Summit7, Andy Sauer, CEO of Sentinel Blue & Phyllis Lee, VP of Content at CIS.

Last week, we tackled a big one: 'Risk, Revenue, Responsibility: The Real Job of the vCISO — and it sparked an incredible conversation around how vCISOs are no longer just about frameworks and firewalls, but about protecting business outcomes, navigating executive risk, and helping clients make strategic decisions.

This week, we’re taking it a step further. Because if you're serious about offering vCISO services as part of your MSP, you’re probably asking: What actually makes a great vCISO? And maybe even more importantly: How do we build and scale this into a repeatable service that doesn’t rely on just one rockstar?

Joining us again, is someone who’s lived this journey — Brian Blakely, seasoned MSP veteran, cybersecurity strategist, and someone who’s helped shape what successful vCISO delivery looks like in real-world MSP environments. Brian is joined by MSP veteran vCISO's Eric Sundt & Steven Hicks.

In this episode of The CyberCall, we're cutting through the noise and rethinking the true purpose of the vCISO role. It’s not just about frameworks, policies, and tech stacks, it’s about tying risk to business outcomes (risk to revenue).

The vCISO’s true value goes way beyond compliance checklists and technical jargon; it’s about being a business partner/enabler, protecting critical revenue streams, and building executive trust.

Leading vCISOs start every client conversation by asking: How does this business make money? That focus shifts security from a cost center to a driver of ROI and resilience.

This week we are joined by several folks: Brian Blakely who has three successful MSP exits, built & sold Cosant Cyber, a team of vCISOs and is currently running the professional services arm of Compliance Scorecard as their Chief Risk Officer. David Primor, CEO & Founder of Cynomi and former Executive Director of Technology for the Israeli National Cyber Directorate. Nett Lynch, CISO of Kraft Kennedy and for head of the vCISO practice at VC3 and as always, Phyllis Lee, VP of Content at CIS, with 25 years of experience at the NSA.

Supply chain attacks doubled according to the 2025 Verizon DBIR. This week the channel awakens to Ingram Micro being attacked by the SafePay Ransomware group. Incident Response (IR) expert, Chris Loehr, EVP of Solis joins The CyberCall, to share perspective on the GlobalProtect VPN compromise.

That’s why today on today's CyberCall, we’re talking about what MSPs can do right now to get serious about third-party risk—and why ISO 27001 may be the most important next step for your business.

We're joined by Calvin Engen, CTO & Co-Founder of F12, who walks us through their recent completion and journey:
✅ What it really took to earn ISO 27001
✅ What changed inside F12 along the way
✅ How it’s shaping trust with their clients now

Special co-host guest: Chip Buck, CTO & Co-Founder of SaaS Alerts joins Phyllis Lee, VP of Content and Andrew Morgan, Founder of The CyberCall.

In this must-listen episode of The CyberCall, hosts Andrew Morgan, Phyllis Lee & Gary Pica are joined by Aharon Chernin, Founder & CEO of Rewst — to explore how Artificial Intelligence (AI), Robotic Process Automation (RPA), and Cybersecurity are colliding in today’s MSP landscape. 

Tune in to learn what your MSP needs to know now to stay ahead!

Connect with Right of Boom:

Website & Conference: https://rightofboom.com/

LinkedIn: https://www.linkedin.com/company/right-of-boom/

YouTube: https://www.youtube.com/@rightofboom

With the release of NIST Cybersecurity Framework 2.0, CIS felt strongly that an update to The Controls was necessary to crossmap to CSF 2.0. Specifically the strongest driver, was the release of the Govern function.

Co-hosts:
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Brian Blakely: https://www.linkedin.com/in/bblakley/
Eric Woodard: https://www.linkedin.com/in/eric-woodard/

Sponsored by Right of Boom cybersecurity conference: https://www.rightofboom.com/

Penetration testing is something that more companies and organizations should be considering a necessary expense. Pen Testing  is an important aspect of discovery and identifying potential critical vulnerabilities within your organizations external network, internal network, applications, or systems. They provide a valuable insight on how your digital and human assets perform.

In this episode we review the criticality of scoping a Pen Test, along with differences between Pen Testing, Red Teaming and Vulnerability Assessment. Why should you choose one over the other and when would one proceed the other.

Sponsored by: Hacket Cyber and post game interview with Founder James Carroll.  Hacket Cyber is a security consulting firm specializing in penetration testing, ethical hacking, and industry-leading cybersecurity services. Our offerings are purpose-built for the MSP, MSSP, and VAR channels.  https://hacketcyber.com/partner/

James Carroll LinkedIn: https://www.linkedin.com/in/jchax/

Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

The biggest takeaway from CIS Control 17 is that planning and communication are critical when responding to an incident. The longer an intruder has access to your network, the more time they’ve had to embed themselves into your systems. Communicating with everyone involved can help limit the duration between attack and clean-up.

Establish a program to develop and maintain an incident response capability (e.g., policies, plans, procedures, defined roles, training, and communications) to prepare, detect, and quickly respond to an attack.

Our sponsor: Exigence (https://www.exigence.io) is a multi-tenant, Incident Readiness, Incident Response platform, built for MSP/MSSPs. Drive new revenue streams and meet cyber insurance & regulatory requirements for Incident Response plans and tabletops.
 
The Exigence platform gives you full control of critical incidents by uniquely addressing every aspect of the incident – turning an unstructured situation into one that is structured and easy to manage. ​

 It coordinates all stakeholders and systems all the time, orchestrates complex workflows from trigger to resolution, simplifies the post-mortem, and always leverages lessons learned for doing it even better next time.

Contact Noam here: [email protected]

Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/
'

CIS Control 16 - Application Software Security
The way in which we interact with applications has changed dramatically over years. Organizations use applications in day-to-day operations to manage their most sensitive data and control access to system resources. Instead of traversing a labyrinth of networks and systems, attackers today see an opening to turn an organizations applications against it to bypass network security controls and compromise sensitive data.  NOTE: Crowdstrike notes that Cloud based attacks and initial access via these systems has increased 112%, therefore SaaS applications, their potential vulnerabilities and misconfigurations along with initial access are all being focused on by threat actors.

**Jim Manico at minute 52:40 - do not miss!!**

Our sponsor: Jim Manico, Founder of Manicode is considered the "Godfather" of the OWASP Top 10 and trains software development teams around the globe. His firm helps organizations building secure code and creates programs to address the primary cause of insecurity, which is the lack of secure software development practices.
Contact Jim here: https://manicode.com/

Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/
'