You've just sold a new security service, the customer is keen, and now the awkward bit starts. The proposal is agreed in principle, but nobody is quite sure which paperwork needs to exist, who owns it, how the onboarding should be recorded, or what counts as enough evidence when a client asks for proof later. […]
A customer rings after a breach story breaks in the press and asks the same blunt question every MSP owner hears sooner or later, can this happen to us too? The honest answer is yes, and the harder truth is that the attack everyone worries about is rarely the first thing that happens. By the […]
If you manage services for small businesses, you've probably seen this pattern: a client knows something is wrong, but there's no dramatic ransom note, no flashy website defacement, just odd logins, strange mailbox rules, and credentials turning up in places they shouldn't. That's the kind of mess a script kiddie can leave behind, not because […]
You've just finished a breach call. The client wants to know whether the file you found on the server is genuine, who touched it, and whether it can be used in a complaint, an insurance claim, or a legal review. If your notes are vague, or if the evidence has passed through several hands without […]
A lot of UK service providers are in the same spot right now. A client has heard about NIST CSF 2.0, asks whether it matters to them, and expects a clear answer that isn't full of framework jargon. That moment is more valuable than it first appears. It's not just a compliance question. It's a […]
Most MSPs have seen some version of this call. A client says their finance login stopped working. Someone in sales got bounced out of a cloud app mid-session. The office Wi-Fi feels unstable, but only in odd bursts. Nothing looks dramatic enough to trigger full incident mode, yet something clearly isn't right. Those are the […]
Doxing is the malicious online publication of someone's private information without consent. For businesses, it often begins when compromised credentials from data breaches appear on the dark web, where over 15 billion stolen credentials are already circulating. A lot of providers hear about doxing only when a client brings it up first. It's usually after […]
Most service providers know the pattern. A client calls after an account has been taken over, an inbox has been abused, or a staff login turns up in a breach long after the damage started. You're then pulled into incident clean-up, password resets, awkward conversations, and questions about why nobody saw it earlier. That reactive […]
Your client calls because a machine is “acting oddly”. Antivirus is installed. The firewall is in place. Backups exist. Yet somebody in accounts opened what looked like a routine invoice, or a user approved a fake software update on a home laptop used for work, and now credentials are exposed, remote access is possible, and […]
A lot of service providers reach the same point. A client has antivirus, a firewall, email filtering and sensible backup routines, then still gets hit by a security incident that slips through the gaps. The awkward part isn't only the incident itself. It's the follow-up question: what are you doing to spot this sooner next […]