6 posts.
The Model Context Protocol has become the default plumbing between LLMs and your business systems. Most SMBs are now running MCP servers without a security review. Here's the risk model and the controls to put in place this quarter.
For most SMBs, M365 + Entra is already the identity fabric — they just haven't configured it as such. Here's the baseline that closes 80% of the identity risk in 10 days.
AWS ships 200+ security features. For a 50-seat SMB, six of them cover 80% of your risk. Here's the order to enable them and what each one actually protects.
The Govern function is the piece SMBs skip and auditors flag. Here's a 90-day rollout that fits a two-person IT team and produces board-legible evidence.
Huntress reliably plugs the gap between endpoint AV and a 24×7 SOC for small teams. Here's where it earns the money and where you still need a human.
The 2026 amendment tightens class-A definitions, changes the CISO reporting cadence, and adds new categories of covered entity. Here's the practitioner's read.