
Most MSPs can already tell you which of their clients' Microsoft 365 environments are misconfigured. The harder question is why so few get fixed — and what it takes to turn security visibility into security operations at scale. Dave sits down with Nick Ross, CEO of Cloud Capsule and a three-time Microsoft MVP, to talk about the operational gap MSPs can't close with assessment tools alone, and how his team is trying to close the distance between finding problems and remediating them across dozens of client tenants at once. Nick launched Cloud Capsule's Manage tier in May to move partners beyond assessment into remediation. He argues the biggest challenge in M365 security isn't visibility — it's execution: the knowledge gap around how to architect a policy, plus the manual hours to deploy it one tenant at a time. He walks through how the platform templatizes baselines, enforces desired state configuration so controls can't be quietly tampered with, and gives technicians the context to know whether flipping a control from red to green will flood the help desk with tickets. The conversation also digs into the harder business questions: whether pushing security work down to junior techs lowers the skill floor and introduces risk, how to prioritize 250+ controls without drowning in red, and the economic reality that many MSPs already know clients are misconfigured but can't get them to pay for the fix. Nick's answer leans on newer levers — the AI-readiness conversation, Copilot data governance, and cyber insurance renewals — to reframe security as table stakes rather than a hard sell. Supported by: Guardz 💼 All Our SponsorsSupport the vendors who support the show:👉 https://businessof.tech/sponsors/ 🚀 Join Business of Tech PlusGet exclusive access to investigative reports, vendor analysis, leadership briefings, and more.👉 https://businessof.tech/plus 🎧 Subscribe to the Business of TechWant the show on your favorite podcast app or prefer the written versions of each story?📲 https://www.businessof.tech/subscribe 📰 Story Links & SourcesLooking for the links from today’s stories?Every episode script — with full source links — is posted at:🌐 https://www.businessof.tech 🎙 Want to Be a Guest?Pitch your story or appear on Business of Tech: Daily 10-Minute IT Services Insights:💬 https://www.podmatch.com/hostdetailpreview/businessoftech 🔗 Follow Business of Tech LinkedIn: https://www.linkedin.com/company/28908079YouTube: https://youtube.com/mspradioBluesky: https://bsky.app/profile/businessof.techInstagram: https://www.instagram.com/mspradioTikTok: https://www.tiktok.com/@businessoftechFacebook: https://www.facebook.com/mspradionews Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.
Podzilla Summary coming soon
Sign up to get notified when the full AI-powered summary is ready.
Free forever for up to 3 podcasts. No credit card required.

Platform Vendors Now Dictate Which AI Agents Can Buy from Your Clients’ Sites

Microsoft Patch Volumes and AI Shifts Deliver More Work, Less Margin for MSPs

Justin Fox on How ValorC3 Adapted to Broadcom’s VMware Licensing Deadline

Operator Implications of Cloud Scarcity: Why AI Spending Now Demands Active Monitoring
Free AI-powered recaps of Business of Tech: Daily 10-Minute IT Services Insights and your other favorite podcasts, delivered to your inbox.
Free forever for up to 3 podcasts. No credit card required.