Episode Description
It started with one questionnaire. Now you're the compliance department, and apparently that's included in the flat rate. On Get NIST-y, Blacksmith InfoSec's cybersecurity and compliance podcast for MSPs, we're talking about who owns the program and who pays for the work.
- Name one executive owner at the client before work starts. Your day-to-day contact doesn't have to be that person.
- Check the contract before charging for new work. Catching up on patching you already owed is different from adding a managed compliance service.
We answer:
- Our client wants to "get compliant," but every task comes back to us. When do we insist on an internal owner?
- How do we keep questionnaire help from turning into unlimited compliance work under a flat-rate MSP agreement?
Make sure to follow the podcast or ask your own questions at: