Compliancy Group Exec To MSPs: ‘You Do Your Part, We’ll Help You Do It Better’

MSPs are in the business of risk management and by working with Compliancy Group can ‘help the client understand what they asked us collectively to do to keep them safe,’ says Paul Redding, vice president of partner engagement and cybersecurity at Compliancy Group.

Compliance and security must come together to keep companies safe.

That’s the message Paul Redding, vice president of partner of engagement and cybersecurity at the Compliancy Group, shared with attendees about regulatory compliance and the “future-proof MSP” at CRN parent company The Channel Company’s XChange August 2022 conference in Denver this week.

“Somebody once asked me, ‘What’s more important, compliance or security?’ That’s like asking, “What’s more important, the foundation or my house?” he said.

MSPs are in the business of risk management and by working with Compliancy Group can “help the client understand what they asked us collectively to do to keep them safe,” Redding said.

When it comes to HIPAA compliance, for example, the majority of end customers include lawyers and accountants, he said.

“All of that falls under the health-care sector,” he said. “You’re creating a path forward into a lucrative sector. ... If. you have one health-care client, you are in health care too,” Redding said.

[Related: CRN 40TH ANNIVERSARY PANEL: 5 KEY WAYS THE CHANNEL HAS EVOLVED]

Compliancy Group is there to back up MSPs and the services they offer in the health-care and other sectors.

“We back them up, we enforce it, we actually create a process in which you’re involved in achieving compliance and all that privacy stuff,” he said. “You do your part, we’ll help you do it better.”

Compliancy Group builds the policies and procedures for the customer. It also manages business associate agreements, handles“vendor due diligence” and issues surveys around difference-making efforts.

“We do this for everyone,” he said.

Matthew Tucker, CEO of Kennett Square, Pa.-based MSP Pegasus Technologies,said after hearing what Redding said he has to have “a few tough conversations” with customers and possibly let them go if they won’t follow compliance standards or take the steps that are needed.

“That’s the bottom line. I have a few clients that are probably putting me at a significant risk and I need to address that,” he said.

“I will attempt to get them on the right path and all the tools and all the education they need, but ultimately it’s their decision,” Tucker added. “They’re going to have to step it up.”