When Your Vendor Becomes Your Problem (EP 1092)

About this episode

A client asked whether we were affected by a security vulnerability, and my honest answer was, “I don’t know.” That’s not a comfortable place to be, but pretending would be worse. I’m talking through what that question got me thinking about, from applications connected to Microsoft 365 to vendor permissions and whether a successful backup will actually be available when we need it. I’m also getting a few things off my chest about vendor relationships, including an equipment replacement that became far more frustrating than it needed to be and why sponsorship doesn’t get anyone a free pass on this show. After nearly three decades in business, I’m still finding things I need to do better. My challenge to myself and to you: pick one critical vendor, review its access, and figure out what you’ll do if it has a security incident before that call comes in. === Chapters 00:10 MSP Vendor Management: Security, Trust, and Accountability 02:51 PHP Vulnerabilities and Client Security Questions 05:31 Shadow AI and ConnectWise Cloud Backup Risks 07:31 Microsoft 365 App Permissions and Guest Access 12:06 Vendor Security, Least Privilege, and Backup Recovery 19:08 Review Your Critical Vendors B