Moving left of boom: A guide to the NIST Identify and Protect pillars
In the world of cybersecurity risk reduction, there’s a concept that we call “the boom”. It’s the moment a ransomware note appears on a screen, or your company name shows up on a breach list after your entire CRM database gets dumped. It’s the explosion. And by the time it happens, your options are limited. Everything before that moment is “left of boom”. When reviewing how strong our security programs are, we tend to focus […]
Sherweb’s Microsoft monthly updates for MSPs — May 2026
May is a busy month on the Microsoft calendar. There are pricing changes to consider, new products to start having conversations about and some administrative updates that affect how you manage customer subscriptions and permissions. This post pulls together the updates from Microsoft’s May announcements that are most relevant to MSPs. We’ve organized them by category so […]
Microsoft Extended Service Terms (EST): What you need to know before enforcement
Starting May 4, 2026, Microsoft is changing how Cloud Solution Provider (CSP) subscriptions behave when they reach the end of their term. The familiar grace period after expiration is being removed and replaced with Extended Service Terms (EST): a paid, month-to-month extension that applies when subscriptions are neither renewed nor cancelled. For CSP partners, this change directly impacts renewal planning, billing outcomes and customer conversations. Understanding how EST works (and […]
Why MSPs should use a security framework in 2026
MSPs are no longer just “the computer janitors”. They are the primary custodians of their clients’ digital survival. In 2026, the shift from putting out security fires to getting to increasing resilience is table stakes. But here’s the problem: most MSPs still approach cybersecurity reactively, addressing threats as they emerge rather than building a repeatable system to manage risk over time. That’s where security frameworks come in. Following […]
Secure AI for SMBs: How MSPs can support with Microsoft Copilot Business, Purview and Defender Suites for Business Premium
AI tools are now a part of everyday work. From drafting emails to summarizing documents, the productivity gains are clear. What’s easier to overlook are the security risks tied to AI use. Without the right safeguards in place, company data can be exposed as AI tools are adopted. Most SMBs don’t have a dedicated security team to manage this on their own, so they’re particularly at risk. This is where MSPs can play a key role in guiding their SMB customers through secure AI adoption and use. To help MSPs […]
