I was just talking to an MSP owner last night at CRN Secure. Confident guy. Told me he had everything covered when it came to cyber liability.

So I hit him with a few of my favorite questions:

  • How are you tracking and proving that your staff actually completed cybersecurity training?
  • If your insurance adjuster called tomorrow, what exactly would you show them?
  • How are you holding your employees accountable for that training?
  • And if your systems were down—ransomware wiped everything—where would you get these records, and how quickly?
  • Even if you cobbled something together, how sure are you it’d hold up when a lawyer started poking holes in it?

He got quiet. Then he shrugged and said,

“We already have security training. We run phishing simulations.”

That was it.

Most MSPs think the same thing. They’ve got some vendor program that checks a box. Their people click through a few slides, answer some quiz questions, and boom—everyone’s certified experts.

But here’s the reality:

  • Most training just checks a completion box.
  • Most programs couldn’t prove a thing if a client’s insurer—or worse, a plaintiff’s attorney—demanded records tied to specific security controls.
  • And most MSPs will find themselves right next to the word “negligence” the moment their client’s lawyer starts drafting a lawsuit.

Cyber Liability Essentials changes that. It ties your training to your Acceptable Use Policies. It keeps airtight records of who completed what, when, and connects it back to your actual environment. So if anyone ever questions whether your people were trained on the right systems, with the right controls, at the right time—you’re covered.

Because let’s be honest:

If your clients get hit, and it turns out their staff didn’t really know what they were doing, do you think they’ll quietly shoulder the blame?

Or do you think they’ll start pointing fingers at the MSP who “handled their security”?

You know how that story ends.

If you don’t have a plan to prove your clients (and your own team) have the right training tied to the right evidence, this doesn’t stop at them. It lands right on your doorstep.

Need some help? Grab 15 minutes with my team. We’ll point you in the right direction—so the next time someone asks, you’ll actually have an answer that holds up.