Your clients are stacking frameworks. NIST CSF for the board. HIPAA for healthcare. SOC 2 for procurement. CMMC for defense contracts. Each one needs evidence, policies, and an audit trail. When you manage them separately across a growing client base, you collect the same proof over and over. A Compliance-as-a-Service platform built for multi-framework delivery […]

Overnight on October 11 and 12, refrigerators and freezers in hundreds of French supermarkets began to warm up. By morning, display cases had reached around 50 °C, stores were throwing out their fresh and frozen stock, and the Paris prosecutor’s office was investigating what it called a “large-scale cyber-attack,” according to BleepingComputer. Reported victims include […]

A cyber insurance policy looks like a financial product. More and more, it works like a contract whose terms are your client’s security controls. That’s the core of a September 2026 client alert from Mark Lehman of Shumaker, published in the National Law Review. It describes a market that has become “an evidence-driven discipline.” Carriers […]

The most common way into a client endpoint right now doesn’t involve malware. It’s the same kind of software your technicians use every day. Help Net Security, reporting on Huntress research, says attackers used legitimate remote monitoring and management (RMM) software in 45% of the endpoint incidents Huntress recorded in Q1 2026. Huntress calls the […]

If every client review starts with finding the current policy, chasing approvals, and reconstructing last quarter’s risk decisions, the problem is bigger than document storage. Your compliance service needs a repeatable operating process. Policy and risk automation should make that process easier to run: fewer duplicate entries, clearer ownership, and better visibility into unfinished work. […]

Your client’s monthly security report shows fewer alerts. That sounds like good news, and it might be. But before you put a green arrow next to the number, there’s a question worth asking: What actually changed? Did the environment become harder to compromise? Did your team eliminate repetitive noise? Or did a logging integration stop […]

Choosing a GRC platform for MSPs starts with a practical question: how will your team turn a compliance finding into completed work? If your technicians manage service delivery in ConnectWise or Halo, ask vendors to demonstrate that entire workflow, not just point to a PSA logo on an integrations page. Blacksmith InfoSec offers a ConnectWise […]

Regulatory requirements are multiplying for your clients, and point-in-time audits are losing relevance. Insurers want ongoing evidence of controls. Enterprise procurement teams want live compliance posture, not last year’s certification. For MSPs, this shift creates a recurring revenue opportunity that did not exist five years ago: Compliance as a Service. CaaS platforms give you the […]

Danelle Au made an argument in SecurityWeek recently that deserves more attention in the MSP channel than it will probably get: the future of AI-driven security depends less on model sophistication than on data completeness, because every filtered log and excluded system creates a blind spot the model can’t reason around. She’s writing for enterprise […]

New partnership helps managed service providers align security operations with a recognized resilience framework, strengthen client protection, and support eligibility for preferred cyber-insurance programs. September 16, 2026 — Blacksmith, the cybersecurity compliance platform built for managed service providers (MSPs), today announced a strategic partnership with SPECTRA, a cyber-resilience certification and risk-management platform serving the MSP […]