In this conversation, Tim Golden discusses the concept of compliance as a service and how it can make things easier for MSPs. Compliance as a service involves helping clients become more compliant and defensible by offering services such as policy development, risk assessments, and security awareness training. The key is to have a centralized risk register where clients can make business decisions based on identified risks. Regularly reviewing the risk register is crucial to ensure that risks are addressed and mitigated. Ignoring compliance can be perilous for MSPs, as it is an essential aspect of business today.