#130 - MSP AI Security - How Much Risk Should You Accept? | BMK VISION ROUNDTABLE

MSP AI Security - How Much Risk Should You Accept? (Josh Peterson & Gary Boyle) MSP AI security is turning into a question of risk tolerance, and most owners are answering it without agreeing on what the risks are. In this BMK Vision Roundtable, Josh Peterson admits he gave Claude a ConnectWise API user with write access to his time entries and did not lose a minute of sleep over it, then asks Gary Boyle the question every MSP owner is now facing: where is the actual security risk, and how much of it should you accept? Gary walks through where API keys really leak, why one-shotting an app is different from a plan, code and goal, and why an MSP that already trusts ConnectWise and QuickBooks with everything cannot single out the LLM as the bigger risk. They work through the client whose locked-down Claude became unusable, why you cannot stop data leaving an SMB anyway, and the cheat code an AI-first MSP holds while its competitors lock everything down. Gary closes on the levels from one to four, and the one path he thinks finally differentiates an MSP. If you're an MSP owner, leader, or operator looking to grow, avoid common pitfalls, or learn from those who've done it before, this conversation is packed with practical insight. Learn more about the BMK Vision Operating System: https://beringmckinley.com/vision Want to join Josh on the show? Apply to be a guest: https://beringmckinley.com/blog#speak... ---------- Connect with Your Hosts Josh Peterson:   / joshdpeterson   Gary Boyle:   / garyboyle   Bering McKinley:   / bering-mckinley   ---------- Topics We Cover Giving Claude write access to ConnectWise, and what that exposes One-shotting an app versus plan, code and goal Where API keys leak, and why pasting one into an LLM means re-keying If you trust ConnectWise and QuickBooks, why fear the LLM? The client whose locked-down Claude became unusable Why you cannot stop data leaving a small business anyway The AI cheat code: what an AI-first MSP gets while competitors lock down Two forms of risk: leaking data, and holding your clients back Levels one to four, and the software company that also has an MSP Two practice projects: dashboards and the PSA-to-accounting connector ---------- Chapters 00:00 - Cold open 00:37 - Josh parks anywhere: the premise behind his AI risk tolerance 02:24 - Giving Claude write access to ConnectWise 05:28 - Claude scopes code well, but a non-developer cannot test it 08:37 - One-shotting an app versus plan, code and goal 11:37 - Where do your API keys live? 14:36 - Advising AI-curious clients who throw up security roadblocks 16:59 - MSPs missed the mark: the AI governance play 20:00 - The fork in the road: can they take it, and will you play? 22:56 - If you trust ConnectWise and QuickBooks, why fear the LLM? 24:05 - All software will use AI, and we already trusted the cloud 26:16 - The client whose locked-down Claude became unusable 28:26 - Why you cannot lock it down for an SMB 30:11 - What am I stopping? The AI cheat code 31:57 - Risk tolerance, shared definitions and the ethical lens 33:33 - Two forms of risk: PayPal, move fast, and cars versus horses 36:47 - Evangelizing ConnectWise in 2006, and why you cannot force clients 39:39 - Level one to level three, and where MSPs should be 42:01 - You are no longer limited by what someone else can give you 44:48 - Level four: a software company that also has an MSP 45:33 - Two practice projects: dashboards and the PSA-to-accounting connector 47:58 - Proof of concept at home, then custom applications for clients 50:40 - Sixteen months in: go find a project and do your own risk assessment ---------- Host Bio - Josh Peterson Josh Peterson is the CEO of Bering McKinley and host of The BMK Vision Podcast. Since 2004, Josh has worked with hundreds of MSP owners to build operationally sound, profitable businesses through consulting, peer teams, and direct coaching. LinkedIn:   / joshdpeterson   Co-Host Bio - Gary Boyle Gary Boyle is a Partner for Strategy & Business Development at Bering McKinley. With a background spanning network engineering, entrepreneurship, and strategic consulting, Gary brings real-world operator experience to helping MSP owners build stronger, more profitable businesses. LinkedIn:   / garyboyle   Learn more: https://beringmckinley.com/vision ---------- #MSP #ManagedServices #MSPOwner #BMKVisionPodcast #AISecurity #AIStrategy