A short advisory talk for managed service providers (MSPs) warning against over-investing time in vendor/tool demonstrations. The speaker recommends staying comfortable with an existing tool stack (avoid shopping when under multi-year contracts), align tools to recognized cybersecurity frameworks, and only evaluate replacements when new threats arise or contracts expire.
One thing that I see a lot of MSPs do that they tend to fall into a trap of getting too involved in tool demos. So your stack is never going to be perfect. You need to be careful about that. You need to make sure that you're comfortable with the stack that you have today and only get lost in those tool demos when you have something that needs to be updated or replaced. So don't review a bunch of tools when you already have a three year contract on one of those tools in your stack already. It's not gonna do you or your business any good. You need to make sure you're focused on making sure that you have tools that adhere to one of the cybersecurity frameworks and that you're evaluating tools as new threats have developed that need to be added to your stack or things that need to be replaced in your stack as those contracts come up. Don't spend all day working on tools. The whole point of a cybersecurity stack is to make sure that you have those various layers that are gonna protect against one another.