Turning Compliance into MSP Revenue (EP 985)

If you’ve ever stared at NIST, CIS, or SOC 2 requirements and thought, “Where do I even start?”, this episode is for you. Jared Casner from Blacksmith InfoSec joins me to break compliance out of the checkbox trap and show MSPs how to turn security frameworks into real, billable services your clients will actually value. We cover practical steps, real stories, and a simple way to talk about compliance without scaring or confusing your customers. Chapters 00:00 Welcome, conference recap, and setup00:48 Running into Jared at MSP IT Expo03:02 Sessions vs. vendor hall and MSP show strategy06:11 Talking to non‑MSPs and sharpening the value pitch09:59 Who is Blacksmith InfoSec and what they do12:13 Frameworks first: NIST CSF, CIS, and mapping to compliance17:30 Security as a long‑term investment, not a quick fix24:26 What MSPs should prioritize now: third‑party and supply chain risk31:41 Monetizing compliance and packaging MSP services36:26 Turning compliance into projects, shared responsibility with clients Guests Blacksmith InfoSec: https://blacksmithinfosec.com Companies / Vendors / Products Mentioned MSP IT Expo (MSP EXPO / ITEXPO in Fort Lauderdale): https://www.mspexpo.comOmni Hotel (Omni Hotels & Resorts): https://www.omnihotels.comNIST Cybersecurity Framework (NIST CSF): https://www.nist.gov/cyberframeworkCIS Controls (Center for Internet Security): https://www.cisecurity.orgCMMC (Cybersecurity Maturity Model Certification): https://dodcio.defense.gov/CMMCHIPAA (Health Insurance Portability and Accountability Act): https://www.hhs.gov/hipaaFTC Safeguards Rule: https://www.ftc.gov/business-guidance/resources/ftc-safeguards-rule-what-your-business-needs-knowFlorida Bar: https://www.floridabar.orgAxios Breach: https://www.bloomberg.com/news/articles/2026-03-31/axios-software-tool-used-by-millions-compromised-in-hackNPM (Node Package Manager): https://www.npmjs.comGet NIST‑y (podcast by Blacksmith InfoSec): https://blacksmithinfosec.com/nistyEOS (Entrepreneurial Operating System): https://www.eosworldwide.comPumpkin Plan (business framework): https://pumpkinplan.com === SPONSORS: Livestream Partner, ThreatLocker: https://www.itbusinesspodcast.com/threatlockerTechnology Partner, NetAlly: https://www.itbusinesspodcast.com/netally/Technology Partner: Bvoip: https://www.itbusinesspodcast.com/bvoipTravel Partner: TruGrid: https://www.itbusinesspodcast.com/trugridDigital Partner, Designer Ready: http://itbusinesspodcast.com/designerready === SHOW MUSIC: Item Title: Upbeat & Fun Sports Rock Logo Item URL: https://elements.envato.com/upbeat-fun-sports-rock-logo-CSR3UETAuthor Username: AlexanderRufire Item License Code: 7X9F52DNML === Connect with Uncle Marv🌐 Website: https://www.itbusinesspodcast.com/🎙 Host: Marvin Bee🛒 Uncle Marv’s Amazon Store (gear & tools I recommend): https://amzn.to/3EiyKoZ☕ Support the show: https://ko-fi.com/itbusinesspodcastIf you found value in this episode, share it with another MSP, IT provider, or tech entrepreneur. Your support helps keep practical, no-nonsense IT business conversations coming every week.