MSP cybersecurity: Fixed budgets can't cover school needs — Bryan Lukralle, CharterTS

About this episode

The episode reveals a governance gap between mounting cybersecurity requirements and the operational realities facing MSPs serving charter schools and nonprofits. Charter Technology Solutions (CTS) exemplifies how regulatory mandates, cyber insurance controls, and evolving client demands confront fixed budgets and unique seasonal workloads in mission-driven verticals. Addressing these pressures necessitates major adaptations to vendor licensing models and new service design approaches to maintain basic security. CTS reports managing over 100 school clients, deploying a lean security stack focused on MDR (addressing endpoint and cloud threats), email security, security awareness training, and cloud backup. This shortlist stems from the need to balance cost with non-negotiable protections, achieved partly by negotiating with vendors to exclude student accounts from licensing fees. Despite these efforts, only around half of CTS’s clients adopt the full cybersecurity package, reflecting financial tradeoffs and limited internal resources at schools. Operational adjustments support these constraints, including shifting permanent staff roles seasonally to meet heavy summer project deman