Turning Risk Into Action: Using AI to Improve Risk Registers and Business Context A long list of criticals isn’t a strategy. If your risk register isn’t helping clients take action, it’s just a spreadsheet. In this session, we’ll show you how to turn scattered risk data into structured insight — and how AI tools like Perplexity can help you add real-world context to client risk conversations.

Staying compliant is no longer optional for MSPs—it’s a business necessity. As regulations tighten and cyber threats evolve, your clients expect you to help them stay secure and compliant. But what exactly does that look like in 2025? Join EasyDMARC and Compliance Scorecard for a no-nonsense session where we’ll break down the latest compliance requirements, the biggest risks MSPs need to watch for, and how to simplify the process without getting buried in paperwork. What we’ll cover: - Key compliance changes MSPs need to prepare for - The most common mistakes (and how to avoid them) - Practical ways to streamline compliance without the headache - How to turn compliance into a revenue-generating service

Compliance Scorecard is a Governance platform that empowers MSPs to achieve compliance success with the tools, insights, and expertise they need to streamline compliance evaluations, conduct risk assessments and gap analysis, and automate policy management. With Compliance Scorecard, you can enhance your MSP’s compliance function and operations expertise, confidently have conversations about compliance with your clients, and deliver governance and compliance services in an affordable and effective way.

Brian Blakley joins us to take on Vendor Risk Assessments.. What worse than getting breached for your vendor's poor security hygiene?? An episode not to mis..

Learn about our Governance as a Service platform:  https://compliancescorecard.com/book-austen

Using a Compliance as a Service platform with generative AI, unlike a computer program, the AI will imitate the actions of a human auditor.

The Foundations of Compliance and Risk Reduction MSPs, helping your customers architect, document, and educate on required policies makes your clients more attractive to their customers, partners, and investors. Want to create live streams like this? Check out StreamYard: https://streamyard.com/pal/d/5486782145101824

Brian joins @TeamTimLive on this Friday the 13th Episode to talk about privacy clauses in your MSA, SOW, NDAs, or documents. We are going to cover a lot of ground.. HIPAA, SEC, GLBA Want to create live streams like this? Check out StreamYard: https://streamyard.com/pal/d/5486782145101824

Let's chat about compliance. Too often, MSPs treat it like a boring checklist instead of understanding how it impacts clients' needs and goals. It's not enough to just check a few boxes when discussing risk with clients. That's why Humanize IT and Compliance Scorecard are here to help. We'll show you how to take a more holistic approach to compliance that makes sense to your clients and helps you build stronger relationships. Want to create live streams like this? Check out StreamYard: https://streamyard.com/pal/d/5486782145101824

Discover how to streamline your MSP project planning with our compliance as a service #CaaS Calculator. In this guide, we break down the process of building a comprehensive project plan for conducting assessments, policy and procedure work, and compliance as a service. Learn how to leverage this tool to optimize your time, determine accurate hourly rates, and enhance your profitability. Key Highlights: -- Introduction to the Project Calculator for MSPs -- Phases: Kickoff, Discovery, Implementation, Assessment, and Reporting Calculating accurate hourly rates for MSP services -- Integrating policy and procedure documentation -- Benefits of using Compliance Scorecard for scalable documentation -- Beta version insights and future updates Whether you're a seasoned MSP or just starting out, this video provides valuable insights to improve your compliance projects with our process calculator. Visit our website for more resources and to download the full calculator. Learn more: Compliance Scorecard https://compliancescorecard.com/ #MSP #ProjectCalculator #ComplianceAsAService #MSPTools #ComplianceScorecard #ITCompliance #MSPBusiness #HourlyRates #ProjectPlanning #ITServices Compliance Scorecard is a Governance as a Service platform that empowers MSPs to achieve compliance as a service success with the tools, insights, and expertise they need to streamline compliance evaluations, conduct risk assessments and gap analysis, and automate policy management. With Compliance Scorecard, you can enhance your MSPs compliance function and operations expertise, confidently have conversations about compliance with your clients, and deliver governance and compliance services in an affordable and effective way.

How to package and profit off SOC2 and Pen-testing

SOC 2 Compliance: The Value of Pentests in SOC 2 Readiness Want to create live streams like this? Check out StreamYard: https://streamyard.com/pal/d/5486782145101824

Compliance Scorecard is a Governance platform that empowers MSPs to achieve compliance success with the tools, insights, and expertise they need to streamline compliance evaluations, conduct risk assessments and gap analysis, and automate policy management. With Compliance Scorecard, you can enhance your MSP’s compliance function and operations expertise, confidently have conversations about compliance with your clients, and deliver governance and compliance services in an affordable and effective way.

2024 National Cybersecurity Strategy Overview | Implications for MSPs ComplianceScorecard.com as we delve into the comprehensive 2024 National Cybersecurity Strategy released by The White House. This video offers a detailed analysis and expert insights into how this new strategy impacts Managed Service Providers (MSPs) across the United States. What's Covered: - Key Highlights of the 2024 National Cybersecurity Strategy - Strategic Changes and their direct effects on MSPs - Compliance Requirements that MSPs need to be aware of - Opportunities for MSPs under the new cybersecurity framework - Expert Advice on adapting to these changes effectively Why Watch? Stay ahead of the curve by understanding the intricate details of the National Cybersecurity Strategy and its implications for your MSP business. Whether you're looking to enhance your cybersecurity offerings or ensure compliance with the latest federal requirements, this video is your go-to resource. Key Takeaways: - Equip yourself with knowledge to leverage the strategy for business growth - Understand compliance challenges and solutions - Explore strategic moves to align with federal cybersecurity goals Join Our Compliance Community Subscribe to our channel for more insights and updates on cybersecurity trends and strategies. Get involved in the conversation by commenting below or visiting our website at ComplianceScorecard.com for more information. #Cybersecurity #MSPs #NationalCybersecurityStrategy2024 #ITSecurity #ManagedServices #ComplianceScorecard

True penetration testing, how they work, and how they are utilized within an overall strategy & why a truly independent source is critical; what’s the role of a CISO in building a solid cyber strategy.

A session with #TeamTim and Luis (from Scaleplad) as we debate what CaaS really is? What are some of the go to market models? What are some things to look out for when offering CaaS. We can explore the operational challenges and opportunities that come with the territory including the necessary internal and external resources, the importance of developing a skilled compliance team, and the impact of compliance services on outsourced security-client relationships.

Understanding the differences between vulnerability assessments / management and penetration tests – when is each appropriate, and where do you need both; and how do these support compliance and cyber insurance requirements.

Tim, Tim, and Jesse dive into why security policies dies when they get saved. How can we make policies a trigger that perform like "Policy as CODE" - If this then that.. Design, Govern, Empower, Educate, Enforce, Review, Adjust

Dive deep into the complexities and methodologies of control cross-mapping with NIST IR 8477 in our upcoming webinar. Discover practical strategies for aligning various cybersecurity frameworks and standards, enhancing your organization's compliance processes. Learn how to efficiently map controls across different regulations and guidelines, ensuring a robust and compliant cybersecurity posture. Ideal for IT professionals and compliance officers looking to streamline their security measures and understand the intricate relationships between cybersecurity frameworks.

Join Compliance Scorecard and Liongard as we talk about Future-Proofing MSP Services Innovations and Strategies for Scalable Compliance

Building upon our first session's exploration of governance and compliance, this second installment dives deep into the operational excellence achievable through the strategic integration of Liongard and Compliance Scorecard. Discover how to leverage this powerful combination to automate asset management and ensure compliance with critical standards, including CIS Implementation Group 1, Control 1. This session is tailored for MSPs seeking to enhance their service offerings with advanced asset governance and compliance capabilities, streamlining their operations and providing unmatched value to their clients.

Join Compliance Scorecard and Lingard for the inaugural session of our enlightening four-part series, where we explore the transformative power of governance and compliance in the MSP landscape. In this interactive webinar, we delve into the essence of risk management, the pivotal 10X idea, and the indispensable role of MSPs in safeguarding clients' digital assets.

Join Tim Golden from Compliance Scorecard and Peter Bellini from ConnectSecure for an enlightening where we will delve into the groundbreaking partnership that is transforming how Managed Service Providers (MSPs) manage vulnerabilities and govern assets. This webinar is as a prelude to the Right of Boom conference at the MGM Grand Resort in Las Vegas. Discover how this integration offers MSPs a one-click solution to asset governance, combining Compliance Scorecard’s Governance-as-a-Service with ConnectSecure’s vulnerability management platform for unparalleled security and compliance management. Hear from industry leaders like about automating asset governance and advancing cybersecurity practices.

Your clients don’t care about CVSS scores. They care about outages, missed sales, compliance fines, and losing customer trust. In this webinar, we’ll show you how to connect vulnerability management to real business outcomes — and how to prioritize what actually matters.

Dive into the crucial intersections between cyber insurance and regulatory compliance with experts Tim and Connor. s organizations grapple with the evolving landscape of cybersecurity threats, understanding these intersections has never been more crucial. This session aims to unravel how aligning compliance efforts with cyber insurance requirements can fortify your cybersecurity defenses and ensure a robust risk management strategy.

Being compliant does not mean being secure, yet many companies stop at compliance - doing the bare minimum to protect their business. So are compliance frameworks hindering companies from truly being secure? How can we encourage leaders to take appropriate security measures, whether or not it goes above and beyond the minimum compliance requirements? Join us in discussing the challenges of compliance vs security!

Get ready for an epic collaboration! ComplianceRisk.io is teaming up for a webinar that's all about turning compliance into revenue. Dive into the dynamic world of DMARC and uncover how it's your key to MSP growth in the face of Google and Yahoo inbox changes. Ready to transform your strategy? Don't miss insights from industry leaders Tim Golden, CEO at ComplianceRisk.io, and Gerasim Hovhannisyan the CEO of EasyDMARC Secure your spot for a webinar that's equal parts education and inspiration!

Are you an #MSP looking to enhance your asset governance strategies? Do you aim to align with the rigorous standards of CIS IG1 compliance? In this session, we will cover: What is Asset Governance and why do we care? CIS IG1 Compliance, Strategies for MSPs, Real-World Governance Examples Who Should Attend? Managed Service Providers seeking to enhance their cybersecurity offerings. IT professionals focused on asset management and governance. Cybersecurity enthusiasts and students eager to learn about compliance and governance frameworks. #cis #goverance #Asset

Risk management frameworks and the myth of cross mapping them The way a compliance and risk framework describes a control and the way framework B describes a similar control is not a one-to-one correlation They can be close but it is not apples to apples You might be comparing a Granny Smith to a Golden Delicious and while they're both apples they're different flavors and different colors Cross mapping be very careful Now our platform is framework agnostic Yes we have documentation We have assessments We have asset We have all the scorecards for the top 20 frameworks CIS 123 NIST HIPAA privacy HIPAA security DSF New York DSF basically the ones that you're seeing with the exception of ISO ISO is a proprietary paid framework and I don't want to cross lines there So once I get into their ecosystem and then have those legal agreements to be able to do that then I might add ISO but we have ISO experts on staff that can help you Okay So framework agnostic #compliancescorecard

Are you accounting for Insider threats in your CMMC program? We don't talk about insider threat in the CMMC ecosystem? Is Insider threat is just as large as external threat. watch the 7 Misconceptions about CMMC and the DoD Explore the critical aspect of insider threats in your CMMC (Cybersecurity Maturity Model Certification) program with our detailed analysis. This video uncovers why insider threats are as significant as external ones in the CMMC ecosystem, a topic often overlooked. We dive into the complexities of managing insider risks within the Department of Defense's compliance framework, offering insights and strategies for robust cybersecurity. Watch our exclusive discussion on '7 Misconceptions about CMMC and the DoD' to deepen your understanding of CMMC requirements and enhance your organization's security posture. Ideal for cybersecurity professionals, DoD contractors, and organizations striving for CMMC compliance. #CMMC #InsiderThreats #Cybersecurity #DoDCompliance #CMMCEcosystem #DefenseContractors #CyberRiskManagement https://www.youtube.com/live/OSMnrv2RGdc?si=C2HajaOClGxHUiXH

Discover the key to robust cybersecurity for Managed Service Providers (MSPs) This comprehensive video delves into the latest risk management strategies, offering invaluable insights for MSPs looking to enhance their security posture. We cover essential topics such as implementing effective two-factor authentication (2FA), the importance of client compliance, and best practices for documenting client decisions. Stay ahead in the ever-evolving cybersecurity landscape with our expert analysis and tips. Perfect for IT professionals, MSP executives, and cybersecurity enthusiasts seeking to minimize risks and protect client data #Cybersecurity #MSPSecurityStrategies #ITSecurity #ManagedServices #DataProtection #compliance #compliancescorecard Protecting Your Business: The Crucial Importance of Managing Risks... own your risk and you own your clients' risks And until you start to identify where those are and transfer them appropriately where they belong right we've been preaching 2FA for decades and you still have that client that says no And when that happens you're going to be culpable because you don't have the evidence to back up saying we told them we told no no no And if a client doesn't want to do a recommendation make sure you document the shit out of that Well of course you know because your tool set told you and you never told the client and you never transferred that risk or at least shared that risk with your client. Read more: https://compliancerisk.io/

Leia Shilobod joins#teamtim and @compliancescorecard as we discuss the Debunking Common Myths Around the DoD's CMMC and 7 Misconceptions about CMMC DoD https://teamtim.live https://compliancerisk.io

Meet Sara, our MSP ninja ! She's mastered desktop support, but when compliance threw a curveball her way, was she ready? Remember that feeling when the crowd goes wild after a touchdown? That's not Sara's thrill. For her, the real game is ensuring MSP clients face compliance head-on, without dropping the ball. Thrown into the GRC arena, without a playbook or clear rules, Sara felt the pressure. The game's stakes? Understanding regulations, documentation, and avoiding fouls from strict referees like FTC and NIST. Manual processes felt like trying to score on a muddy field, but with Polygon's Governance as a Service, she found her winning strategy! Alignment, Authorization, Adoption, and Assessment: Polygon’s 4 A's became her MVPs, transforming her approach to ensure her MSP wasn't just playing, but leading the GRC league. Today, Sara is not just a player; she's the MVP of compliance! And with Polygon, you can be too. Ready to lead your MSP to GRC success? Sign up for Polygon and be the champion your team needs!

Wes Spencer Joins TEAMTIM.LIVE on this special episode to discuss how MSPs gain a seat at each client's leadership & strategy table. IT providers need to move beyond supplying tools to their clients. They need to understand their strategic goals, core data flows, and day to day challenges. Wes Spencer brings a wealth of experience and shares some failures and successes on the journey of knowing each client and ultimately creating the trust necessary to benefit booth the MSP and the end users. Security, digital transformation, data insights, and automation revenue opportunities are created once that seat at the table is established. Sponsor: Compliance Risk - compliancerisk.io and @WesSpencer

Compliance is no longer just an IT issue—it’s a business imperative. As regulations tighten and cyber threats increase, MSPs need to stay ahead of compliance requirements to protect their clients and grow their businesses. In this webinar, Channel Program and Compliance Scorecard will break down the latest compliance challenges, real-world case studies, and actionable strategies to help MSPs turn compliance from a headache into a revenue driver.

The easiest way to make a sale and defeat objections is to stop those objections in their path. Marnie has helped 1000s of MSPs deliver quality business reviews by turning them into strategic conversations instead of sales pitch. She started her career by selling precalculus to 16 year olds as a high school math teacher so she has some skills Come join the conversation and walk away with a strategy (or3) you can implement tomorrow to help you in your sales conversations. Join Marnie Stockman from @LifecycleInsightsMSP

How to tell business owners an engaging story with Data and Metrics An MSP can have all the data in the world, but if they can’t drive meaningful discussion with the SMB, they can’t derive meaningful revenue and deploy impactful cybersecurity measures. Typical cyber dashboards, reports, or "panes of glass" include metrics on tickets closed and vulnerabilities patched but what do those metrics mean to the business owner? We assembled a panel of cyber data analytics to chat on what metrics are important and how MSPs can resonate with business owners. Lets start with what data is important to the business. The presence of digital data drives the business that the owner wants to protect. Where does the business data reside in the IT footprint (dont forget Saas sprawl)? How is the data vulnerable, and what can be done about it? Who has been granted access to this data, and what have they been doing with it? What else is installed where this data resides that might compromise the security posture of the data? Whats my $$ liability for loss or down time? What are some of the metrics to evidence the current state of that data liability? What steps can I take or have been taken as either IT owner, business owner or both to reduce that risk and liability? Whats that progress look like? What efforts are the most risk reducing? Does the business have meaningful insurance and how much is the right amount of coverage? We'll talk about the new paradigm and requirements of needing deep insights around what's inside the corporate castle wall. Increasing drivers like cyber Insurance, due diligence and compliance to various government or industry frameworks are forcing businesses large and small to know key insights around their data assets.

If your idea of assessing potential partner relationships stops at asking for an audit report, attend this event. Matt and Tim have spent time on both sides of the evaluation process and are sharing their experiences in managing partnerships. Key Discussion Topics include: Moving beyond audit reports Types of third-party risk The vendor's perspective Matt and Tim from @compliancescorecard

Raw unedited shoot and share live stream today’s topic compliance in the news. What’s going on with the defense industrial base, CMMC, @NIST and a whole lot more from @compliancescorecard

Discover how Business Process Modeling Notation (#BPMN) can revolutionize your cyber governance efforts. These 7 Pits on BPMN can effectively visualize, secure, and strengthen your business processes using BPMN, empowering your organization to confidently navigate the complex world of cybersecurity. Seven tips, examples, best practices, and practical tips to enhance your cyber resilience. Master the power of BPMN in achieving robust cyber governance and safeguarding your digital assets. Don't miss out on this essential knowledge to protect your organization in today's cyber landscape! compliancerisk.io get's you compliance ready but keeping your risk in check https://compliancerisk.io/

Turn your videos into live streams with Restream https://restre.am/ANIm Chris Johnson from CompTIA joins the roundtable to discuss the why, how, and what of CompTIA's upcoming Cybersecurity Trustmark.

Are you ready to transform your MSP from a tool vendor to a strategic partner? Join us for this webinar to learn how to position your company as an indispensable part of your clients' cybersecurity strategy by using the Governance, Risk & Compliance (GRC) methodology. https://compliancerisk.io/ https://fortmesa.com/ https://powerpsa.com/ #grc #compliance #msp #governance

Turn your videos into live streams with Restream https://restre.am/ANIm Matt and Tim discuss Compliance as a service, and what it means to you. Also anyone heard of shared responsibility??? Join us and bring your questions!!!!

Documenting a process leads to a specific result. If the process is well written, it will lead to a consistently positive result. Moreover, the rest of the team can follow it and reproduce your desired results. Note that all businesses already have a process, even if it’s not in writing. You teach a new team member how to reset a password using a series of actions that lead to a particular result. They can follow the process without documentation. Undocumented processes may be efficient with a small team. However, you risk Leaky Bucket Syndrome (LBS) every time you grow. LBS is the tendency to lose some knowledge as each person passes on their learning to another.

In this episode we talk with Wayne SELK from @comptia about their Cybersecurity Trustmark program for #msps #mssp and #itserviceprovider We hear about Zero Trust, but what does it really mean. As an MSP, how can I get started or improve upon Zero Trust in my organization and with my clients? This session will help you gain a better understanding of why zero trust to some degree already exists within your organization and how you can improve upon that understanding while building or strengthening your security-first culture through a set of industry-accepted best-practices. CompTIA Trustmarks: https://connect.comptia.org/membership/corporate/comptia-trustmarks Compliance as a Service (CaaS) https://compliancerisk.io/compliance-as-a-service Compliance Focused peer group for MSPs and MSSPs https://compliancerisk.io/register/compliancy-consultation-program/ Help your team grow its institutional knowledge around the complexities of compliance.

Turn your videos into live streams with https://restream.io Join Matt Topper, Josh Hohbein, and Henry Timm for another round of laughs, hot takes, and MSP chatter you won’t want to miss! Friday, April 11, 2025 11:00 AM EST There might be a guest host—or maybe even two. Who? You’ll have to tune in to find out. Set your reminder and jump into the fun with your MSP fam! Connect with our hosts: Josh Hohbein: https://lnkd.in/ebN5F8w8 Matt Topper: https://lnkd.in/eYvP33sg Henry Timm: https://www.linkedin.com/in/henrytimm/ Join the MSP Communities: r/MSP: https://lnkd.in/eTDrJUk MSPGeek: https://mspgeek.org/ MSPs R Us: https://lnkd.in/e3YXujqC CyberDrain: https://cyberdrain.com/ The Tech Degenerates: https://lnkd.in/emV5ndhS #MSPCommunityLive #TechTalk #HotTakesAndGoodVibes

Okay, I’m going to admit it: policy management doesn't have to suck. In fact, it can be a lot of fun and very rewarding. The problem is that most companies don't know how to approach their policies in a way that keeps them secure and their workers happy. Listen to @LifecycleInsightsMSP and @compliancescorecard talk about Why policy templates set you up for failure and what you can do about it! #policy #policymaking #cybersecurity #policytemplates #templates #sop #policymatters Policy Process Phases consist of Alignment, Authorization, Adoption and Assessment More from: https://compliancerisk.io/2022/10/policy-management-doesnt-have-to-suck/ https://lifecycleinsights.io/

A Fireside chat with Sean Lardo from Connectwise, talking #pitchIT and #itnation and more

compliancerisk.io HIPAA Gap Analysis tool

Explanation of Privacy, Privacy Law and Data Protection Law A Brief discussion about U.S. Federal Privacy and Data Protection Laws HIPAA GLBA COPPA A Brief discussion about important State Privacy and Data Protection Laws California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) New York Privacy Act Other State Data Breach Laws ABrief discussion about EU Data Protection Laws GDPR EU Cookies Directive