Business of Tech: Daily 10-Minute IT Services Insights

MSP Radio
  • 4.9 (87)
  • Tech News
  • Updated Daily

In 10 minutes daily, The Business of Tech delivers the latest IT services and MSP-focused news and commentary. Curated to stories that matter with commentary answering 'Why Do We Care?', channel veteran Dave Sobel brings you up to speed and provides resources to go deeper. With insights and analysis, this focused podcast focuses on the knowledge you need to be effective, profitable, and relevant.

SUPPORTER CONTENT

Support independent content from MSP Radio

$12.00/month or $99.99/year

  1. 18h ago

    Reseller, MSP, Services Merged: Structural Risks and Rewards in Barracuda’s Program – Michelle Hodges

    Barracuda’s recent unification of its reseller, MSP, and services programs into a single partner success structure highlights a continuing trend toward channel consolidation and streamlined partner management among technology vendors. This realignment is designed to provide partners with a unified interface and consistent experience, moving away from segmented, product-specific engagement and instead centralizing processes, portals, and incentives under one program. The most consequential operational development is the consolidation of partner access points, reducing from seven disparate logins to a single portal. According to Barracuda, this centralization supports not only transactional activity but also encompasses partner enablement, updated certifications, automation of onboarding, and incentives tied to the entire customer lifecycle. The company reports that partner engagement through the new portal has exceeded prior benchmarks by over 20% compared to the previous period, with error rates reported below 10%. Supporting developments include Barracuda’s adjustment of program features such as launching “Barracuda ONE” and Mastery certifications, adding compliance and AI-focused badges, and introducing a buy-now feature tailored for lower-volume purchases. The company also referenced plans to further modernize renewals, contracts, and support structures to address common channel complaints in billing, contract flexibility, and support availability. For MSPs and IT providers, these changes shift operational dynamics by consolidating vendor dependence and reducing administrative friction, but may also introduce risks related to program uniformity and centralized governance. Reliance on a single vendor-managed platform can concentrate risk if features or support become limiting for certain business models. MSPs should assess the tradeoffs of standardized engagement versus flexibility—especially for scenarios like minimum seat requirements and variable contract terms—and scrutinize the alignment between partner incentives and evolving compliance and technology demands. Supported by: ScalePadHaloPSA 💼 All Our SponsorsMSP Radio is supported by our partners: ABC Solutions · CometBackup · Guardz · HaloPSA · LogMeIn · Mailprotector · OpenText · Pax8 · Proofpoint · Rythmz · ScalePad · TimeZest · Transit AI · USecure Supporting the IT services community through insights, analysis, and transparency. 🚀 Join Business of Tech PlusGet exclusive access to investigative reports, vendor analysis, leadership briefings, and more. 👉 https://businessof.tech/plus 🎧 Subscribe to the Business of TechWant the show on your favorite podcast app or prefer the written versions of each story? 📲 https://www.businessof.tech/subscribe 📰 Story Links & SourcesLooking for the links from today’s stories? Every episode script — with full source links — is posted at: 🌐 https://www.businessof.tech 🎙 Want to Be a Guest?Pitch your story or appear on Business of Tech: Daily 10-Minute IT Services Insights: 💬 https://www.podmatch.com/hostdetailpreview/businessoftech 🔗 Follow Business of Tech LinkedIn: https://www.linkedin.com/company/28908079 YouTube: https://youtube.com/mspradio Bluesky: https://bsky.app/profile/businessof.tech Instagram: https://www.instagram.com/mspradio TikTok: https://www.tiktok.com/@businessoftech Facebook: https://www.facebook.com/mspradionews Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

    Reseller, MSP, Services Merged: Structural Risks and Rewards in Barracuda’s Program – Michelle Hodges

  2. 2d ago

    What MSP Operators Overlook in Operations Before Selling—Insights from Evergreen’s Craig Fulton

    The episode highlights the ongoing consolidation of the MSP sector, driven by acquisition-focused entities like Evergreen Services Group. This structural mechanism centers on long-term acquisition strategies and the operational integration of MSPs, with Evergreen positioning itself as a permanent holder rather than a market aggregator intent on short-term profit. The discussion underscores how private equity-backed firms operate within multi-market IT services, spanning managed services, application support, and specialized government contracts. Evergreen Services Group reports completing 47 acquisitions in the previous year, now owning 135 MSPs and 171 companies overall, with stated revenues of $1.5 billion and $250 million EBITDA. According to Craig Fulton, the company’s standard acquisition model typically offers 90% of enterprise value in cash at closing, with a remaining 10% tied to a one-year earnout dependent on 15% EBITDA growth. Quality of earnings assessments and customer renewal health are described as primary factors that can stall or terminate deals, particularly if financial accounts lack clarity or significant customer dissatisfaction emerges. A recurring operational gap identified by Evergreen in acquisition targets is the absence of a dedicated growth leader within firms, which raises post-sale continuity risks. While questions were raised about the possibility of acquisitions inadvertently generating new competition in local markets—through staff departures and new businesses—no substantive evidence was cited that this has impacted consolidation effectiveness or market saturation. The dialogue also explored Evergreen’s investor structure and commitment to transparency about backend ownership and fund relationships with sellers, with claims of a high earnout payment rate and seller satisfaction. For MSPs and IT leaders, the practical implications involve heightened scrutiny of operational maturity, especially in finance and client management roles, to realize sustained valuation and minimize deal-related risk. Vendor dependency deepens post-acquisition, as Evergreen leverages consolidated contracts to meet earnout targets. Owners not seeking to sell are advised to reassess account management practices, explore targeted AI integration for client engagement, and maintain competitive EBITDA performance, as independently managed firms continue to demonstrate strong profitability metrics.   Supported by: GuardzTimeZest 💼 All Our SponsorsMSP Radio is supported by our partners: ABC Solutions · CometBackup · Guardz · HaloPSA · LogMeIn · Mailprotector · OpenText · Pax8 · Proofpoint · Rythmz · ScalePad · TimeZest · Transit AI · USecure Supporting the IT services community through insights, analysis, and transparency. 🚀 Join Business of Tech PlusGet exclusive access to investigative reports, vendor analysis, leadership briefings, and more. 👉 https://businessof.tech/plus 🎧 Subscribe to the Business of TechWant the show on your favorite podcast app or prefer the written versions of each story? 📲 https://www.businessof.tech/subscribe 📰 Story Links & SourcesLooking for the links from today’s stories? Every episode script — with full source links — is posted at: 🌐 https://www.businessof.tech 🎙 Want to Be a Guest?Pitch your story or appear on Business of Tech: Daily 10-Minute IT Services Insights: 💬 https://www.podmatch.com/hostdetailpreview/businessoftech 🔗 Follow Business of Tech LinkedIn: https://www.linkedin.com/company/28908079 YouTube: https://youtube.com/mspradio Bluesky: https://bsky.app/profile/businessof.tech Instagram: https://www.instagram.com/mspradio TikTok: https://www.tiktok.com/@businessoftech Facebook: https://www.facebook.com/mspradionews Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

    What MSP Operators Overlook in Operations Before Selling—Insights from Evergreen’s Craig Fulton

  3. 3d ago

    Silent Disqualification Risks Rise as UK Platforms and US Buyers Automate MSP Selection

    The episode reveals a structural shift toward eligibility thresholds and silent disqualification in the managed services sector, driven primarily by large vendors and regulatory buyers. Companies now establish non-negotiable numerical thresholds—such as cloud revenue minimums or cryptography certifications—as criteria that MSPs must meet to maintain channel access or bid eligibility. Key organizations shaping these dynamics include Microsoft, which has reduced its global distributor base by two-thirds, and regulatory buyers who increasingly rely on FIPS 140-3 cryptography validation as a procurement gate. The most consequential development discussed is Microsoft’s reduction of its distributor partners from approximately 180 to roughly 60, based on a $30 million annual cloud solution provider revenue threshold per region, or $1 million for direct bill partners, according to Scott Frew of iAsset. Concurrently, regulated buyers are disqualifying MSPs whose tools lack FIPS 140-3 validated cryptography, a certification that requires third-party verification and is referenced by procurement officials as a hard requirement. The Managed Services Journal and vendor press releases provide evidence that this filtering mechanism now operates prior to any sales engagement, largely outside the control or even awareness of affected MSPs. Supporting developments reinforce this threshold-driven landscape. CompareIT in the UK has launched an AI-driven platform to assess over 8,000 MSPs on up to 197 criteria, allowing buyers to shortlist providers before direct interactions. Vendors are responding by integrating compliance features (such as Datto RMM adding FIPS 140-3 support) without extra cost, turning compliance into a baseline rather than a differentiator. Third-party products and partnerships are emerging—like RYTHMz’ SCOUTz or the Senteon and SPECTRA alliance—to supply objective evidence of eligibility, making attestation a commodity and part of a burgeoning industry. For MSPs and IT leaders, the operational implication is a shift from sales-driven competition to eligibility-driven access. Risks arise from losing channel relationships, not keeping up with compliance requirements, or being silently excluded from consideration in regulated deals. Ensuring a clear owner for validation data, maintaining up-to-date records of distributor status, and proactively verifying the business’s public profile now represent concrete governance requirements. Eligibility is becoming a precondition for market participation—those who manage it systematically maintain market access while others are removed without notification. 00:00 Three Thresholds, Three Weeks  03:42 Cheaper Than A Conversation 06:06 You'll Never Get The No 09:12 Why Do We Care? Supported by: WebPros(CometBackup) HaloPSA  💼 All Our SponsorsMSP Radio is supported by our partners: ABC Solutions · CometBackup · Guardz · HaloPSA · LogMeIn · Mailprotector · OpenText · Pax8 · Proofpoint · Rythmz · ScalePad · TimeZest · Transit AI · USecure Supporting the IT services community through insights, analysis, and transparency. 🚀 Join Business of Tech PlusGet exclusive access to investigative reports, vendor analysis, leadership briefings, and more. 👉 https://businessof.tech/plus 🎧 Subscribe to the Business of TechWant the show on your favorite podcast app or prefer the written versions of each story? 📲 https://www.businessof.tech/subscribe 📰 Story Links & SourcesLooking for the links from today’s stories? Every episode script — with full source links — is posted at: 🌐 https://www.businessof.tech 🎙 Want to Be a Guest?Pitch your story or appear on Business of Tech: Daily 10-Minute IT Services Insights: 💬 https://www.podmatch.com/hostdetailpreview/businessoftech 🔗 Follow Business of Tech LinkedIn: https://www.linkedin.com/company/28908079 YouTube: https://youtube.com/mspradio Bluesky: https://bsky.app/profile/businessof.tech Instagram: https://www.instagram.com/mspradio TikTok: https://www.tiktok.com/@businessoftech Facebook: https://www.facebook.com/mspradionews Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

    Silent Disqualification Risks Rise as UK Platforms and US Buyers Automate MSP Selection

  4. 4d ago

    Sharon Florentine on Why Most SMBs Deploy AI Without Budgets or Governance

    The episode highlights a pronounced governance gap in how small and mid-sized businesses (SMBs) are adopting artificial intelligence (AI) tools and services. New research from GTIA, discussed by Sharon Florentine, identifies that while AI use has become nearly universal among SMB end customers of IT service providers, most lack formal policies, leadership, and budgeting structure around their deployment of AI. This reflects a foundational misalignment between AI adoption rates and organizational preparedness. According to the GTIA study, 97–98% of surveyed SMBs are already using AI to some extent, yet only 20–25% do so strategically. Strategic usage is defined by having AI under a leadership role, with established policies and procedures. In addition, only around one-quarter of respondents reported having a dedicated AI budget. This suggests that despite broad AI integration, most spending is ad hoc or drawn from unrelated IT priorities. The research surveyed 520 SMBs across 11 verticals, reinforcing the generalizability of the findings. Supporting discussions emphasized that this misalignment is both an opportunity and a risk for MSPs and ITSPs. Unaddressed gaps in governance, budgeting, and cybersecurity may undermine value delivery and create liability issues. Practical challenges—such as unclear funding sources, lack of proactive customer engagement, and potential cybersecurity risks tied to unmanaged AI use—were described as persistent pain points. It was also noted that shifting to a proactive approach is essential for building trust and effective client partnerships. For MSPs and IT leaders, the operational implications center on the need to address governance and budget planning for AI while maintaining a focus on established IT infrastructure. Relying solely on existing processes may introduce unmanaged risk, particularly as customers expand AI use without adequate oversight. Providers are advised to prepare by developing frameworks for AI budgeting, security controls, and policy development, rather than diverting focus from foundational IT services. Neglecting core infrastructure and data practices in pursuit of unstructured AI integration was identified as a critical operational miscalculation.   Supported by:  Pax8  ScalePad  💼 All Our SponsorsMSP Radio is supported by our partners: ABC Solutions · CometBackup · Guardz · HaloPSA · LogMeIn · Mailprotector · OpenText · Pax8 · Proofpoint · Rythmz · ScalePad · TimeZest · Transit AI · USecure Supporting the IT services community through insights, analysis, and transparency. 🚀 Join Business of Tech PlusGet exclusive access to investigative reports, vendor analysis, leadership briefings, and more. 👉 https://businessof.tech/plus 🎧 Subscribe to the Business of TechWant the show on your favorite podcast app or prefer the written versions of each story? 📲 https://www.businessof.tech/subscribe 📰 Story Links & SourcesLooking for the links from today’s stories? Every episode script — with full source links — is posted at: 🌐 https://www.businessof.tech 🎙 Want to Be a Guest?Pitch your story or appear on Business of Tech: Daily 10-Minute IT Services Insights: 💬 https://www.podmatch.com/hostdetailpreview/businessoftech 🔗 Follow Business of Tech LinkedIn: https://www.linkedin.com/company/28908079 YouTube: https://youtube.com/mspradio Bluesky: https://bsky.app/profile/businessof.tech Instagram: https://www.instagram.com/mspradio TikTok: https://www.tiktok.com/@businessoftech Facebook: https://www.facebook.com/mspradionews Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

    Sharon Florentine on Why Most SMBs Deploy AI Without Budgets or Governance

  5. 5d ago

    DMARC Adoption Exposes Organizational Gaps: Controls Exist but Go Unused

    A central structural shift discussed is the acceleration of security risk and remediation cycles driven by AI-powered tooling available to both attackers and defenders. The episode highlights that the difference between offensive and defensive capabilities now depends less on underlying technology and more on access controls and permission settings, as demonstrated by offerings and incidents involving Anthropic, OpenAI, Cloudflare, and tool vulnerabilities in products from Connectwise and Enable. Primary evidence of this shift includes the use of advanced AI models and agent frameworks, which have enabled attackers to compress the timeline for successful ransomware intrusions to under 10 hours, according to Unit 42 and The Register. On the defense side, Cloudflare and OpenAI announced an early access service leveraging Daybreak models (including GPT 5.6 Cyber) for vulnerability detection and suggested patching, subject to human review. Meanwhile, Microsoft implemented a policy throttling unpatched Exchange servers until remediation occurs, rather than relying on voluntary patching, marking a move towards enforced maintenance in vendor ecosystems. Supporting developments underline the blurred line between offense and defense: Anthropic’s simultaneous release of two AI models (Claude Fable 5.1 and Claude Mythos 5.1) with identical capabilities but different access restrictions based on user vetting, and OpenAI’s promotion of its GPT-6 Astra model’s security testing performance, while applying safeguard layers to limit exploit generation. Reports from Hack the Box and Red Sift, citing increased enterprise adoption of AI for both security assessment and attack surface discovery, reinforce that automation now exposes vulnerabilities faster than traditional remediation processes can keep pace. The operational implication for MSPs and IT service providers is that speed of decision-making—particularly client approval for emergency remediation—has become a critical risk control point. The analysis underscores that technical controls and cyber insurance arrangements are frequently untrusted or unused, leaving actual exposure governed by change management logistics. Providers are advised to formalize rapid approval clauses and escalation contacts in contracts, shifting from hypothetical scenarios to incorporating real vendor disclosures as triggers. This adjustment is positioned as a necessary response to a landscape in which exploits and mitigations move at comparable velocity, and traditional maintenance rhythms no longer align with risk movement. 00:00 The Intruder Left A Report  04:17 Same Model, Different Door 06:44 Configured, Never Turned On 09:47 Why Do We Care? Supported by:  Proofpoint Guardz  💼 All Our SponsorsMSP Radio is supported by our partners: ABC Solutions · CometBackup · Guardz · HaloPSA · LogMeIn · Mailprotector · OpenText · Pax8 · Proofpoint · Rythmz · ScalePad · TimeZest · Transit AI · USecure Supporting the IT services community through insights, analysis, and transparency. 🚀 Join Business of Tech PlusGet exclusive access to investigative reports, vendor analysis, leadership briefings, and more. 👉 https://businessof.tech/plus 🎧 Subscribe to the Business of TechWant the show on your favorite podcast app or prefer the written versions of each story? 📲 https://www.businessof.tech/subscribe 📰 Story Links & SourcesLooking for the links from today’s stories? Every episode script — with full source links — is posted at: 🌐 https://www.businessof.tech 🎙 Want to Be a Guest?Pitch your story or appear on Business of Tech: Daily 10-Minute IT Services Insights: 💬 https://www.podmatch.com/hostdetailpreview/businessoftech 🔗 Follow Business of Tech LinkedIn: https://www.linkedin.com/company/28908079 YouTube: https://youtube.com/mspradio Bluesky: https://bsky.app/profile/businessof.tech Instagram: https://www.instagram.com/mspradio TikTok: https://www.tiktok.com/@businessoftech Facebook: https://www.facebook.com/mspradionews Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

    DMARC Adoption Exposes Organizational Gaps: Controls Exist but Go Unused

  6. 6d ago

    Slide’s Flexible Contracts: Balancing Client Retention and Revenue Risk - Carlson Choi

    A central structural shift discussed is the growing pressure on margins and operational risk, driven by the competing models of vendor platform integration versus modular, best-in-breed solutions for managed service providers. Slide, a backup and disaster recovery vendor with roughly 1,000 partners, serves as an example of a company resisting long-term, bundled contracts and instead favoring a highly flexible, monthly engagement model. This approach reflects a broader industry debate over contract structure, integration depth, and the risk of vendor dependency. Slide argues that month-to-month agreements offer MSPs operational agility, while conceding these contracts heighten vendor-side financial unpredictability and require more proactive account management. The company acknowledges consistent partner requests for longer-term deals, mainly to secure better pricing or manage risk, but maintains that flexibility takes precedence. The result is a dynamic in which vendors bear greater short-term churn risk in exchange for heightened accountability. Secondary discussion critiques the “single pane of glass” approach found in many vendor stacks. Slide claims current market consolidations mostly deliver superficial integration—such as unified login—while failing to address the operational inefficiencies of managing backup across multiple platforms. True interoperability remains limited, and MSPs often pay a process penalty, with searches and recoveries split across separate product silos. Attempts to automate recovery and search using AI offer partial relief but can introduce new risks if processes are not robust. For MSP organizations, these developments reinforce the importance of scrutinizing vendor contracts for embedded risk, especially as flexibility increases exposure to abrupt churn. The tradeoff between interoperability and platform lock-in demands attention to operational readiness, governance, and resource planning. Smaller providers, in particular, should weigh the support and integration limits of their partners against the risks of fragmented tooling and short-term agreements.Supported by: TimeZestScalePad 💼 All Our SponsorsMSP Radio is supported by our partners: ABC Solutions · CometBackup · Guardz · HaloPSA · LogMeIn · Mailprotector · OpenText · Pax8 · Proofpoint · Rythmz · ScalePad · TimeZest · Transit AI · USecure Supporting the IT services community through insights, analysis, and transparency. 🚀 Join Business of Tech PlusGet exclusive access to investigative reports, vendor analysis, leadership briefings, and more. 👉 https://businessof.tech/plus 🎧 Subscribe to the Business of TechWant the show on your favorite podcast app or prefer the written versions of each story? 📲 https://www.businessof.tech/subscribe 📰 Story Links & SourcesLooking for the links from today’s stories? Every episode script — with full source links — is posted at: 🌐 https://www.businessof.tech 🎙 Want to Be a Guest?Pitch your story or appear on Business of Tech: Daily 10-Minute IT Services Insights: 💬 https://www.podmatch.com/hostdetailpreview/businessoftech 🔗 Follow Business of Tech LinkedIn: https://www.linkedin.com/company/28908079 YouTube: https://youtube.com/mspradio Bluesky: https://bsky.app/profile/businessof.tech Instagram: https://www.instagram.com/mspradio TikTok: https://www.tiktok.com/@businessoftech Facebook: https://www.facebook.com/mspradionews Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

    Slide’s Flexible Contracts: Balancing Client Retention and Revenue Risk - Carlson Choi

  7. Sep 7

    Syncro’s AI Shift: How Model Costs and Adoption Create New Separation Among MSPs

    The episode details a structural shift toward increased automation and integration of AI layers within managed services platforms, raising questions of risk management, transparency, and economic models. Syncro’s integration with Anthropic’s AI, positioned as a native connector in the Anthropic ecosystem, exemplifies how platform providers are embedding AI to automate routine technical work and streamline technician workflows. Syncro’s leadership claims their platform is targeting up to 30% autonomous handling of Level 1 and Level 2 technical tasks by the end of the year and 50% by 2027, according to internal projections. Current reported outcomes show between 15% and 25% of tickets resolved autonomously via guided ticket resolution, with ticket summarization reportedly improving time to action and resolution speeds by up to 50% for some ticket types. The company indicates that economic models are in flux, as large language models are being run at a loss and cost recovery is being managed via credit-based usage tied to task volume. Supporting developments include the persistent gap in adoption: only 5-10% of Syncro partners—primarily larger, more mature MSPs—are actively leveraging these AI-driven features, according to company estimates. There is also ongoing debate about the continued necessity of tickets as a unit of work, with Syncro’s product team emphasizing the importance of visibility, measurement, and audit traceability amidst increasing automation. For MSPs and IT leaders, these shifts signal increased vendor dependency and exposure to evolving cost structures related to AI model consumption. There are governance considerations regarding transparency and audit trails for AI-driven operational decisions, and practical questions around adoption readiness, as the efficiency gains are not automatic and depend on proactive enablement. Operators should monitor changing license and consumption models, scrutinize audit and accountability processes, and reassess how automation may alter labor and cost dynamics.Supported by:GoTo(LogMeIn)Proofpoint 💼 All Our SponsorsMSP Radio is supported by our partners: ABC Solutions · CometBackup · Guardz · HaloPSA · LogMeIn · Mailprotector · OpenText · Pax8 · Proofpoint · Rythmz · ScalePad · TimeZest · Transit AI · USecure Supporting the IT services community through insights, analysis, and transparency. 🚀 Join Business of Tech PlusGet exclusive access to investigative reports, vendor analysis, leadership briefings, and more. 👉 https://businessof.tech/plus 🎧 Subscribe to the Business of TechWant the show on your favorite podcast app or prefer the written versions of each story? 📲 https://www.businessof.tech/subscribe 📰 Story Links & SourcesLooking for the links from today’s stories? Every episode script — with full source links — is posted at: 🌐 https://www.businessof.tech 🎙 Want to Be a Guest?Pitch your story or appear on Business of Tech: Daily 10-Minute IT Services Insights: 💬 https://www.podmatch.com/hostdetailpreview/businessoftech 🔗 Follow Business of Tech LinkedIn: https://www.linkedin.com/company/28908079 YouTube: https://youtube.com/mspradio Bluesky: https://bsky.app/profile/businessof.tech Instagram: https://www.instagram.com/mspradio TikTok: https://www.tiktok.com/@businessoftech Facebook: https://www.facebook.com/mspradionews Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

    Syncro’s AI Shift: How Model Costs and Adoption Create New Separation Among MSPs

  8. Sep 4

    Accountability Shifts to Deployers as EU Sets Timelines for AI and Security Incidents

    A structural shift in regulatory accountability now places incident notification and liability directly on the operators or deployers of AI-powered and software tools, rather than on technology vendors or model developers. This mechanism is made explicit by the requirements of the EU’s Cyber Resilience Act (CRA), Digital Services Act (DSA), and the upcoming Machinery Regulation. Incidents such as the Cursor AI coding agent breach at a Belgian chemical company underline that compliance timelines and regulatory scrutiny target the entity deploying the technology. CrowdStrike and Okta both reported that increased enterprise security spending is being driven by heightened AI-generated attacks, according to their quarterly results. Gartner forecasts AI security spending will reach $4.8 billion by 2027, up 68.7% from this year, with usage control as the most dynamic segment. A public letter signed by over 100 vendors—including OpenAI, Anthropic, AWS, and Microsoft—warns of urgent defensive needs but does not shift responsibility to software suppliers. Recent breaches and vulnerabilities illustrate how accountability remains with the service provider or end-user implementer. The Cursor breach assigned notification duties to AnySphere (the product vendor) and the breached organization, not to upstream model providers. Likewise, after N-able's Passportal bug, MSPs were accountable for client-facing remediation. In each case, the “accountability line” lands on the party deploying the tool. For MSPs and IT service providers, these trends require updating agreements, operations, and client communications. Service structures must prioritize regulatory response timelines, documentation, and clear reporting obligations. Providers serving EU clients, or those linked to global supply chains, will encounter business risk if they do not proactively address these regulatory demands before mandated deadlines. 00:00 Prevention Got A New Price  03:25 The Half That Doesn't Move 05:50 Where The Call Lands 09:27 Why Do We Care?   Supported by: Proofpoint  GoTo(LogMeIn)  💼 All Our SponsorsMSP Radio is supported by our partners: ABC Solutions · CometBackup · Guardz · HaloPSA · LogMeIn · Mailprotector · OpenText · Pax8 · Proofpoint · Rythmz · ScalePad · TimeZest · Transit AI · USecure Supporting the IT services community through insights, analysis, and transparency. 🚀 Join Business of Tech PlusGet exclusive access to investigative reports, vendor analysis, leadership briefings, and more. 👉 https://businessof.tech/plus 🎧 Subscribe to the Business of TechWant the show on your favorite podcast app or prefer the written versions of each story? 📲 https://www.businessof.tech/subscribe 📰 Story Links & SourcesLooking for the links from today’s stories? Every episode script — with full source links — is posted at: 🌐 https://www.businessof.tech 🎙 Want to Be a Guest?Pitch your story or appear on Business of Tech: Daily 10-Minute IT Services Insights: 💬 https://www.podmatch.com/hostdetailpreview/businessoftech 🔗 Follow Business of Tech LinkedIn: https://www.linkedin.com/company/28908079 YouTube: https://youtube.com/mspradio Bluesky: https://bsky.app/profile/businessof.tech Instagram: https://www.instagram.com/mspradio TikTok: https://www.tiktok.com/@businessoftech Facebook: https://www.facebook.com/mspradionews Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

    Accountability Shifts to Deployers as EU Sets Timelines for AI and Security Incidents
See All (517)

4.9
out of 5
87 Ratings

About

In 10 minutes daily, The Business of Tech delivers the latest IT services and MSP-focused news and commentary. Curated to stories that matter with commentary answering 'Why Do We Care?', channel veteran Dave Sobel brings you up to speed and provides resources to go deeper. With insights and analysis, this focused podcast focuses on the knowledge you need to be effective, profitable, and relevant.

Information

You Might Also Like