
The client bought the AI tool, the MSP enabled it, and six months later nobody can say who approved what. Ignacio sent us a question about who owns those settings and what needs to be in writing. Then we get into when a...


technology
Hosted by Blacksmith InfoSec · technology · EN
Get NIST-y is a podcast that breaks compliance out of the checkbox trap and turns it into a real security advantage. No fluff, no FUD—just practical strategies to make compliance work for your MSP. Each week, we'll dive into compliance topics based on real questions from our MSP partners and subscribers.
Required Pod Score for this podcast. PitchCentric checks your profile against host openness, topical fit, and audience signals before you generate a pitch.
Contact path
Verified email
Booking probability
33%
Guest openness
Selective
Sign up to generate a grounded pitch for Get NIST-y.
Signup to Generate a PitchGet NIST-y is a podcast that breaks compliance out of the checkbox trap and turns it into a real security advantage. No fluff, no FUD, just practical strategies to make compliance work for your MSP. Each week, we'll dive into compliance topics based on real questions from our MSP partners and subscribers.
Get NIST-y is hosted by Blacksmith InfoSec. The show has published 60 episodes to date.
Recent episodes include "Who Approved This? AI Settings and Risky Clients" (27 October 2026, 25 minutes), "Friends First, Competitors 97th: PitchIT Gets Spicy" (20 October 2026, 48 minutes), and "Data Retention for MSPs: What "Deleted" Actually Means" (13 October 2026, 20 minutes).
Get NIST-y publishes roughly weekly, with episodes averaging 30 minutes across 60 episodes.
Booking probability for Get NIST-y is 33%, and the host is rated Selective on guests. Get NIST-y requires a Pod Score of 80 or higher. Get NIST-y's contact route on record: verified email.
The strongest fits for Get NIST-y are IT Services & Software Development. Get NIST-y has a technology audience.
Blacksmith InfoSec hosts Get NIST-y, a technology podcast with 60 episodes published.
Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

The client bought the AI tool, the MSP enabled it, and six months later nobody can say who approved what. Ignacio sent us a question about who owns those settings and what needs to be in writing. Then we get into when a...

Blacksmith InfoSec, Lemhi , and Synthreo are the three PitchIT finalists headed to the stage at IT Nation Connect. So naturally, we invited John Harden and Callen Sapien onto Get NIST-y and tried to start a fight...

Your client asked you to delete an ex-employee's data. The mailbox is gone, but copies are still sitting in backups. So what exactly did you just promise? Jared and Mike talk deletion, retention and the limits of...

Your client knows about the security gap. They understand the recommendation. And they still say no. Now what? This week on Get NIST-y, Jared and Mike talk about when risk acceptance is legitimate, when it still means...

Following NIST or CIS is useful, but does it prove your MSP can actually operate under pressure? Chris "CJ" Johnson from GTIA joins us to talk about the Cybersecurity Trustmark , what security maturity looks like in...

Antivirus, backups, and MFA are a start. They won't tell you how payroll runs when the check printer is inaccessible or keep your risk register current six months later. This week, Jared and Mike talk about what a small...

It started with one questionnaire. Now you're the compliance department, and apparently that's included in the flat rate. On Get NIST-y, Blacksmith InfoSec's cybersecurity and compliance podcast for MSPs, we're talking...

AI adoption happened before most clients wrote the rules. That does not make an AI policy useless. It changes the job from trying to stop AI to governing the tools already in use, training people to make better...

Following NIST does not automatically cover New York-specific rules, and that does not mean your MSP needs to become a law firm. We sort out where legal counsel belongs, what the client must own, and which...

Open source is already in your stack, whether you deliberately installed it or not. In this ChannelCon 2026 talk, Jared lays out a practical way for MSPs to decide what deserves trust, what needs guardrails, and what...

Cyber insurance questionnaires ask businesses to make definitive claims about security controls they may not even understand. Spectra Cyber founder and CEO Edouard von Herberstein joins Michael at ChannelCon to talk...

Your client wants you to “make us compliant,” but nobody on their side will approve policies, review risks, or chase employees. Then a questionnaire shows up and suddenly everyone needs twelve months of evidence by...

Starting an MSP takes less red tape than cutting hair. That gets awkward when lawmakers write cybersecurity rules without enough input from people who actually run IT services. NSITSP legislative chair Ted Giesler...

Episode #30
The CMMC Phase 2 pause did not erase NIST 800-171, and it did not hand MSPs or contractors a permission slip. What it has done is resurface some of the same problems CMMC has faced for years - misinformation, gate...

Despite what you may have read on LinkedIn, Reddit, or Twitter, CMMC did not die. The rollout IS paused at Phase 1. But, that's only a small portion of the story. MSP owner and CMMC practitioner Lawrence Cruciana from...

Using Stripe, Square, Shopify, or a hosted checkout can shrink your PCI scope, but it does not make PCI disappear. This episode of Get NIST-y gets into where MSP responsibility actually starts, where it should stop, and...

MSPs keep asking how to sell compliance without sounding like a fearmongering weirdo or a walking control spreadsheet. This episode is a talk from ChannelPro Chicago on why compliance sales usually go sideways, and what...

Security questionnaires are not the finish line. They are the opening move in a negotiation, and saying “yes” to everything can create a bigger problem than admitting what is still in progress. In this episode of Get...

Shared responsibility gets ugly when the client wants compliance, but not ownership. This week's episode is about keeping MSPs out of the unpaid compliance department trap. We answer: - A medical client's cyber insurer...

Compliance is not security. Security is not compliance. But if you treat either one like a box-checking exercise, your client is going to have a bad time. In this episode of Get NIST-y, Jared and Mike talk with Shawn...
Recent guests on Get NIST-y. Study who booked and why before you pitch.
PitchCentric classifies Get NIST-y under these industries. Guests from them are the closest fit, and each links to the best podcasts in that industry.
Shows with the most semantically similar episode content. Pitch one, pitch all; producers cluster.
Is this podcast yours and you'd like to remove or correct details? Request removal or email privacy@pitchcentric.com.
Questions about the free trial? See the pricing FAQ