Sam Glynn | Why Good Compliance Isn't Enough and How to Do Better

In this engaging episode of MSP Business School, host Brian Doyle is joined by Sam Glynn—a notable figure in the GRC landscape—to pull back the curtain on the intricacies of compliance within MSPs. Sam Glynn shares his wealth of expertise from a career that has advanced from IT management in financial services to becoming a specialist in cybersecurity and compliance. Listeners are introduced to the significance of GRC, particularly how MSPs can align themselves with increasing regulatory demands while fostering profitability and customer satisfaction.

The episode delves into the hurdles MSPs face when confronted with compliance audits and assessments. Sam explains how MSPs can view these assessments as opportunities to strengthen client relationships and increase revenues rather than as adversarial encounters. With an emphasis on understanding the framework alignment and the nuanced art of risk management, the conversation underscores the importance of embracing these challenges to enhance services and outcomes. The episode wraps up with a focus on Sam's advisory role, offering a perspective that's both realistic and strategic for organizations striving to improve their security posture.

Key Takeaways:

• Understanding GRC: Sam Glynn illustrates how MSPs can navigate Governance, Risk, and Compliance to achieve compliance while maintaining profitability and improving service delivery.

• Partnering for Success: Enlisting experts like Sam can transition an MSP's role from a mere service provider to a strategic partner capable of advising clients on risk management and compliance.

• Framework Alignment & Risk Management: Embrace the interpretive nature of risk management processes, focusing on impacts and likelihoods to develop robust and tailored security strategies.

• Regulatory Insights: Compliance is not solely about meeting regulatory requirements; MSPs must also consider best practices for comprehensive security that addresses today's threats.

• VCISO Clarity: The role of a virtual Chief Information Security Officer (VCISO) extends beyond IT technicalities to include governance, risk management, and strategic alignment with organizational objectives.

Guest Name: Sam Glynn

LinkedIn page: https://www.linkedin.com/in/samglynnie/

Company: Secure and Assure

Website: https://secureandassure.com/

Show Website: https://mspbusinessschool.com/

Host Brian Doyle: https://www.linkedin.com/in/briandoylevciotoolbox/

Sponsor vCIOToolbox: https://vciotoolbox.com