MSPs should implement security in smaller, manageable steps rather than all at once. Clients lack the capacity to absorb a massive overhaul, so breaking work into increments helps them progress steadily. If a security team can't see an asset or threat, they can't protect it.
I hope you like my YouTube image. I didn't find a good one of you. Like, you're going to have to send me some goofier ones other than just like your nice prim and proper one in your three-piece suit, which is awesome, by the way. But I was like, I'm going to do one of my stupid ones. Yeah, frame it as a maturity journey. Business owners are not afraid to start thinking about all things in iteration. They're not afraid to take things into parts and work on them. In fact, that's what they prefer. Sometimes we are guilty as security people to say, you got to go for the whole shoot match right now. You got to do everything now. And the truth is, that's too much to swallow. It's too hard for the client to understand. They're not ready for the risk. They're not ready for the burden. And so slice things up slowly and give them things in iteration, because that's going to really help as you kind of move, move forward. And then just continue to let them know, if I can't see it, I can't protect it. And same for you.
