Chris Wiser advises MSPs/consultants to educate clients about cybersecurity risks rather than relying on the ambiguous label 'managed services.' He stresses documenting steps taken (to show due care), obtaining proactive cybersecurity risk assessments, and positioning services around value rather than price to secure insurance coverage if a breach occurs.
I would sit down and educate them about cybersecurity. Here's why you need to focus on cyber. Here's why you not just managed services. Like managed services is a buzzword now. I would never actually use that term with a client. I would never talk about that. Here's why you need to focus on cybersecurity. Here's you're going to get hacked. Here's why you need to put these things in place. Namely, here's the why guys, they need to establish a pattern that they cared. We weren't negligent. We tried. We know we were potentially going to get hacked but we did all the right things. So then somebody can basically somebody else can pay the bill, insurance company can pay the bill. That's the goal. So we do that, we educate them and then our goal coming out of that sit down meeting is to get a cybersecurity risk assessment. Either on break fix. I would depending on the relationship with the client and this is kind of a in betweener I would probably charge them for it, but maybe not always. Right. The key is to not make the product or the service all about price.