MSP 1337

The episode contains a handful of practical operational observations - policy length norms, review cadence standards, and integrating a security program into EOS meeting rhythms - but most of the runtime is consumed by meandering anecdote, generic platitudes about process vs. tools, and conversational throat-clearing. The useful content is real but sparse relative to 43 minutes.

“the best investment to me is not a product or a service or a tool. It's a process”

“mature policies are very distinct at, uh, two to four pages”

The episode recycles well-worn MSP conventional wisdom - tools are over-relied upon, process beats product, leadership buy-in matters, accountability requires external parties. The one mildly interesting angle is weaving a security program into an EOS cadence, but it is mentioned briefly and without real depth. Nothing is contrarian or first-principles.

“we've taken an EOS approach to, To a lot of our. To a lot of our, uh, evidence collection”

“nobody has to do this in our, in our industry. I mean they, they, they probably should if they want to survive another decade”

Jim Harriman is a genuine small-MSP operator who has run a security program for nearly a decade and completed six SOC 2 Type 2 audits - actual practitioner credibility. However, he operates at a small, unnamed scale with no verifiable market impact, and the host functions as a peer rather than an interviewer, limiting the depth that a stronger guest interrogation might unlock.

“actually just completed our, like, sixth Sock 2 audit”

“we've been doing this for almost a decade now”

There are a handful of concrete specifics - six SOC 2 audits, 20 - 25 monthly review items, 12-month review frequency as a framework norm, one-to-two page policies with data governance at five pages - but no dollar figures, no named client examples, no measurable outcomes, and no external data citations. Claims like 'if you use more than 10% of it, you're in the elite category' are stated without any evidence.

“if you use more than 10% of it, you're in the elite category”

“there's like 20 to 25 of those things that we're going through”

The host adds structural value by proposing a maturity model (initial/developing/established/optimized) and drawing useful distinctions like policy length and review cadence, but he rarely challenges Jim's assertions and the conversation drifts frequently into loose analogies and filler. The episode closes with an off-topic exchange about fiction novels, underscoring the lack of editorial discipline.

“How do I bluntly put this in a nice way?”

“if I was really dialing in a. An accountability tool, that the initial piece of the. Have I filled in my answers”