A single-speaker YouTube talk warning MSPs against wiping client data after a cyber incident because insurance-mandated forensics may treat wiped systems as tampering with a crime scene. The speaker frames this as both a legal/liability risk (facing insurers in court) and a business opportunity for MSPs who handle incidents correctly.
Clients will get hacked, they will file an insurance claim, they're going to do a full forensic investigation. And I'll tell you what, if wipe and reload is on your list of remediation tactics, you're just wiping up a crime scene or wiping down a crime scene, walking in there with alcohol swabs and wiping her all down. But for some reason MSPs are like, oh, I gotta make sure my client don't know or I gotta be careful or it's a way to let's build a different boat. Guys, you have a huge opportunity in front of you. I told him what if I could 3x your seat price in the next 12 months? And he looked at me and he's like bro. Like yeah. Because guys, the liability from the insurance companies is handing this down. Good freaking luck getting into a courtroom against a multi billion dollar insurance company. We cared about cybersecurity.