In this episode, Chris sits down with MJ Patton to explore the foundational principles that help Managed Service Providers grow, mature, and thrive in today's increasingly complex IT and cybersecurity landscape. Drawing from her extensive experience working with service providers of all sizes, MJ explains why many MSPs struggle to scale evenly across their business and why success starts with understanding exactly who you serve, the problems you solve, and the value you create. Together, they discuss the dangers of chasing every new technology trend, the importance of specialization, and how strategic partnerships can help MSPs deliver more without overextending their teams. The conversation also examines the growing role of fractional leadership services, including vCIOs, vCISOs, and fractional CMOs, and how MSPs can evolve from technology providers into trusted business advisors. Chris and MJ share practical insights on navigating cybersecurity complexity, managing risk, demonstrating ROI, and shifting customer conversations from service-level agreements to measurable business outcomes. Whether you're looking to refine your service strategy, strengthen customer relationships, or build a more scalable MSP, this episode offers actionable guidance for creating sustainable growth through focus, trust, and strategic leadership. Key Takeaways:

• Why MSP growth depends on balancing operational maturity across the business
• How specialization creates stronger customer relationships and better outcomes
• The evolving role of vCIO, vCISO, and fractional leadership services
• Why trust, risk management, and business outcomes matter more than SLAs
• How strategic marketing leadership can accelerate MSP growth
• Practical advice for demonstrating value and earning long-term client loyalty

Recommended Reading: Brave Thinking by Mary Morrissey.Perfect for: MSP owners, IT service leaders, cybersecurity professionals, channel partners, and anyone looking to build a stronger, more strategic technology services business.

Human risk has become one of the most challenging and misunderstood aspects of cybersecurity. In this episode of MSP 1337, Chris Johnson sits down with Nihil Morjaria from usecure to explore why traditional security awareness training is no longer enough and what it takes to build a truly proactive human risk management strategy.

The conversation examines how MSPs and ITSPs are evolving beyond technology management into governance, risk, and compliance, and why understanding user behavior is now just as important as managing firewalls and endpoints. Chris and Nihil discuss the limitations of one-time phishing exercises, the rise of shadow IT and AI-driven data exposure, and the growing need to combine security awareness, breach intelligence, password hygiene, and user behavior into a single view of risk.

Listeners will learn how leading providers are using human risk intelligence to prioritize remediation efforts, reduce alert fatigue, empower end users, and deliver measurable security outcomes for clients. Whether you're struggling with phishing failures, unsanctioned applications, or simply trying to make security awareness more effective, this episode offers practical insights for turning your users from a potential liability into a powerful line of defense.

In this episode of MSP 1337, episode 300, Chris Johnson sits down with Matt Lee for a candid fireside chat on one of the most misunderstood topics in business and cybersecurity: governance. Using relatable examples, from concrete truck deliveries to vacuuming a floor, Matt breaks down why governance isn't about policies, paperwork, or compliance checklists. It's about setting clear goals, assigning accountability, managing risk, and ensuring everyone works toward the same outcome. The conversation explores why governance has historically been treated as an afterthought in IT and security, why separating security from IT often creates more problems than it solves, and how organizations can build stronger operational resilience through shared leadership, stakeholder alignment, and intentional decision-making. More importantly, Matt challenges listeners to stop viewing governance as a bureaucratic exercise and start seeing it as the foundation that enables security, operations, and business success. Because when governance is missing, even the best tools, frameworks, and people struggle to deliver consistent outcomes. If you've ever wondered why organizations with great technology still experience recurring failures, it's tied to the absence of governance. Key Takeaway: Security doesn't create accountability. Compliance doesn't create resilience. Governance creates the conditions that make both possible.

Most organizations don't have a security tool problem, they have a signal-to-noise problem. Chris and Tatum Treadwell dive into the realities of securing decades-old technologies against modern attackers, the rise of AI-enhanced social engineering, and the growing challenge of alert fatigue. The conversation explores why education, human judgment, and meaningful action matter more than flashy marketing claims, offering MSPs a practical perspective on building resilience in an increasingly complex threat environment.

Everyone talks about email phishing, ransomware, and endpoint security, but one of the most dangerous attack vectors is sitting in your pocket. In this episode of MSP1337, Chris Johnson sits down with Mark Kreitzman of Efani to expose the growing threat of SIM swapping, mobile account takeovers, and the hidden security gaps traditional carriers have failed to solve. They explore why mobile numbers remain a critical trust anchor for banking, MFA, and identity verification, how carrier business models contribute to risk, and what individuals and organizations can do to better protect themselves. The conversation also examines secure phones, privacy realities, and why true mobile security requires protecting the account behind the device, not just the device itself.

There are some perks to going to the following efani landing page: https://efani.com/msp1337

The cybersecurity industry loves to sell tools. What it rarely talks about is the hard work required to make those tools effective. In this episode, Jim Harryman joins Chris to challenge the idea that technology alone creates security. They discuss why mature organizations focus on governance, accountability, documentation, policies, review cycles, and operational discipline long before they look for the next shiny solution. If you've ever mistaken a technology purchase for progress, this conversation may be the reality check your organization needs.

Planes, hotels, and conference stages aren’t what put you at risk, it’s what you bring with you. In this episode, Dawn Sizer of 3rd Element dives into the real reasons traveling professionals become easy targets: weak policies, poor communication, unsecured devices, and total blind spots around personal data exposure. From conditional access headaches to rideshare risks and AI policy chaos, this is a practical, no-excuses look at how security breaks down in the real world, and what you need to fix before your next trip.

This episode explores how cybersecurity is evolving from point-in-time assessments to continuous, intelligence-driven operations. Galena Koh of Cyber Bay shares how predictive analytics, crowdsourced ethical hackers, and AI are reshaping how organizations understand and manage risk. We discuss how to scale security without adding headcount, why human expertise remains essential, and how governance and trust underpin effective security ecosystems. The result is a clearer model for modern cybersecurity, proactive, collaborative, and built for constant change.