Phin Security

Putting the S Back in MSP | EP 013

In episode 013 of the Gone Phishing podcast, host Connor Swalm and guest Kyle Spooner explain that managed service providers (MSPs) offer comprehensive, contract-based IT services—including monitoring, management, and support—to small businesses as outsourced IT departments, with specialized variants like MSSPs focusing specifically on security, and emphasize the importance of vendor selection, tailored service stacks, and industry-specific expertise in delivering effective solutions.

Podcast Episode: Putting the "S" Back in MSP (EP 013)

Host: Connor Swalm
Guest: Kyle Spooner (Chief Executive for MSPGeek Con)

Introduction

Connor Swalm welcomes listeners to the Gone Phishing podcast, focusing on cybersecurity threats and human vulnerability. The episode features Kyle Spooner to discuss managed service providers (MSPs) and their role in the industry.

What is an MSP?

Kyle Spooner explains that an MSP is a company that provides managed services, typically on a contract basis. Unlike traditional break-fix companies that bill per hour for specific issues, MSPs offer unlimited labor and a suite of services for a monthly fee. These services often include monitoring, management, and support for client systems.

There are also specialized MSPs, such as Managed Security Service Providers (MSSPs), which focus on security services. Spooner notes that MSSPs are essentially MSPs with an added emphasis on security.

Selecting Services and Vendors

MSPs decide which services to offer based on several factors, including:

  • The needs of their clients
  • The reliability and support of vendors
  • Security considerations
  • Ease of account management

Spooner emphasizes the importance of vendor support and the ability to resolve client issues efficiently. MSPs typically offer a "stack" of products and services tailored to their clients' industries and needs.

The Value of MSPs for Small Businesses

MSPs act as an outsourced IT department for small businesses, providing expertise that business owners may lack. This allows businesses to focus on their core operations while ensuring their technology and security needs are met by a team of specialists.

MSPs often have:

  • Teams with various technical specializations
  • Account managers
  • Security experts

Some MSPs focus on specific industries, allowing them to offer more targeted solutions and help clients grow by leveraging industry-specific knowledge.

MSP vs. MSSP

The discussion addresses whether MSPs can also be MSSPs. Spooner and Swalm agree that MSPs can provide security services if they have the necessary expertise on staff. Otherwise, they should partner with or refer clients to security specialists.

Importance of MSP Communities

MSP communities, such as MSPGeek, Reddit's r/MSP, and various Facebook groups, play a crucial role in the industry. These communities provide:

  • Support and answers to technical questions
  • Opportunities for members to help each other
  • A sense of fraternity and shared purpose

Spooner shares that MSPGeek started as a community focused on a single product and has grown into a nonprofit organization with a board of directors. The community is planning its first conference dedicated to technician education and skill development.

MSPGeek Conference

The upcoming MSPGeek conference aims to:

  • Educate technicians in the MSP space
  • Focus on the learning journey and skill progression
  • Teach core values and skills needed to be effective technicians

The conference is designed to help technicians understand not just how to perform tasks, but why they are important and how to advance their careers.

Closing

Connor Swalm announces that Kyle Spooner will return for another episode to discuss what makes a good MSP technician, the different levels of technicians, and how to train them effectively.

Swalm thanks listeners for tuning in and encourages them to learn more about security awareness training at Phin Security.