Wes SpencerCo-Founder, Empath · Co-Founder of Empath | Recovering Cybersecurity Guy| Keynote Speaker | 2020 Cyber Educator of the Year | Building the MSP Workforce Operating System

Strengthening #msp Security: Policies and Leadership

19 Sept 2025 · 1 min

Watch on YouTube

1:00

In this segment of a two‑person discussion, the speakers identify the most critical security weakness facing Managed Service Providers (MSPs): the lack of policies that restrict which devices can sign in to corporate resources. They note that many Cloud Capsule tenants have no device‑access controls, creating a large attack surface for adversary‑in‑the‑middle token theft and phishing. The conversation explains how enforcing an approved asset inventory and device‑access policies can mitigate these attacks, and argues that leadership should shift focus from reactive, post‑breach tools to proactive, foundational policy controls that protect MSP environments.

Chapters

So any areas where you feel like, if you had to point to one of these 3 that you feel like MSPs are probably weakest at, which would it be?
Well, I'd say today that the number 1, you know, can users sign in from any devices, where I see the biggest holes, and we see that in Cloud Capsule through most of the tenants that are onboarded, they don't have a policy in place that restricts device access to corporate resources. And, you know, I've even shown in previous videos too, this could even help with these very much growing attacks today, like, adversary-in-the-middle token theft and phishing. You know, this can actually prevent that from occurring through that phishing flow. So not only does it fulfill like an approved asset inventory, but you have this ripple effect of security that can really help protect a lot of these incidents where this is where the leadership aspect to me becomes the focus of instead of looking at reactive post-breach mitigation tools, you know, we really want to shift the attention span to What are the policies we can do not only to implement and get some of these core foundational elements in place,