Cyber Maturity Model — How to Align to CIS for People Who Don’t Give a Shit About Controls

Most MSPs don’t lack frameworks—they lack time, patience, and clients who care about anything that sounds like a “control.” This session cuts through the alphabet soup and replaces it with a practical, no-nonsense maturity arc built on the spirit of the CIS Controls, not the textbook. We’ll walk through the handful of foundational actions that actually move the needle, show how to turn them into repeatable processes your clients will understand, and demonstrate how “maturity” doesn’t require perfection—just consistency. Expect humor, blunt truths, and a roadmap any MSP can follow even if their clients (or techs) don’t give a shit about frameworks. The goal: stop arguing about which standard is best and start building a real, defensible baseline that works in the messy world MSPs actually live in.