The ITSM Practice: Elevating ITSM and IT Security Knowledge

Is your cybersecurity team built around security capabilities or vendor products? In this episode of The ITSM Practice Podcast, Luigi Ferri explores why CISOs should prioritize security skills, detection and response, identity security, and operational resilience over vendor-specific expertise. Discover how to build adaptable cybersecurity teams, reduce vendor dependency, eliminate knowledge silos, and align security technology with business risks and strategic objectives.

In this episode, we answer to:
How can CISOs build cybersecurity teams around security capabilities rather than vendor-specific technologies?
How can organizations reduce vendor dependency, eliminate knowledge silos, and improve cybersecurity operational resilience?
Should mid-market organizations develop cybersecurity expertise internally or leverage MSPs, MSSPs, and external security specialists?

Resources Mentioned in this Episode:
Meriplex website, article “Cybersecurity Services for Mid-Market Businesses: What You Really Need in 2025”, link: https://meriplex.com/cybersecurity-services-for-mid-market-businesses/

HashiCorp website, article “The Risks of Cybersecurity Tool Sprawl: Why Consolidation Is a Strategic Priority”, link: https://www.hashicorp.com/en/blog/the-risks-of-cybersecurity-tool-sprawl-and-why-we-need-consolidation

MES Computing website, article “What Midmarket CIOs Must Prove By EOY 2026: Fewer Platforms, Faster Security, Measurable Outcomes”, link: https://www.mescomputing.com/news/2026/business/what-midmarket-cios-must-prove-by-eoy-2026

CyberNeurix website, article “Security Tool Consolidation in 2026: Why CISOs Are Deleting Tools Instead of Buying Them”, link: https://blogs.cyberneurix.com/blog/security-tool-consolidation-2026/

Red Canary website, article “Why CISOs Under Consolidation Pressure Are Embracing Microsoft Security Solutions”, link: https://redcanary.com/blog/microsoft/tool-consolidation-microsoft

Bitdefender website, article “The Security Platform Is Dead. Long Live the Security Platform.”, link: https://businessinsights.bitdefender.com/security-platform-is-dead-long-live-security-platform

Connect with me on:
LinkedIn: https://www.linkedin.com/in/theitsmpractice/
Website: http://www.theitsmpractice.com
And if you want more tips and guidance, follow me on LinkedIn. I am sharing daily posts regarding Enterprise Service Management, IT Service Management, and IT Security.

Credits:
Sound engineering by Alan Southgate - http://alsouthgate.co.uk/

Graphics by Yulia Kolodyazhnaya

How can an MSP grow revenue without growing headcount at the same rate? In this episode of The ITSM Practice Podcast, Luigi Ferri explores how MSPs can protect margins through a scalable Target Operating Model, standardization, automation, AI, knowledge management, self-service, suppliers, and Professional Services.

In this episode, we answer to:
How can an MSP scale revenue without scaling operational headcount?
How can automation, AI, self-service and knowledge management reduce service desk demand?
When should customer requests move from managed services support to Professional Services?

Resources Mentioned in this Episode:
AdvanceIT website, article "From Startups to Scale-Ups: Key Trends in Scaling Operations for Long-Term Growth", link https://www.advanceit.sg/blog/from-startups-to-scale-ups-key-trends-in-scaling-operations-for-long-term-growth

Advantage website, article "9 Modern IT Challenges for Multi-Location Enterprises", link https://www.advantagecg.com/blog/modern-it-challenges-multi-location-enterprises

Splashtop website, article "5 Strategies for Scaling IT Operations", link https://www.splashtop.com/blog/5-strategies-for-scaling-it-operations

BPM website, article "Scaling IT Security Operations for High-Growth Technology Companies", link https://www.bpm.com/insights/scaling-it-security-operations/

TechMonarch website, article "How to Scale Managed IT Services for Growing Businesses Without Compromising Quality", link https://techmonarch.com/blog/how-to-scale-managed-it-services-for-growing-businesses-without-compromising-quality/

Convergence Networks website, article "How to Overcome the 10 Biggest Managed Services Challenges", link https://convergencenetworks.com/blog/managed-it-services-challenges/

Clearing website, article "The Playbook for Scaling Internationally (Without Losing Control)", link https://clearing.com/news/the-playbook-for-scaling-internationally-without-losing-control/

Connect with me on:
LinkedIn: https://www.linkedin.com/in/theitsmpractice/
Website: http://www.theitsmpractice.com
And if you want more tips and guidance, follow me on LinkedIn. I am sharing daily posts regarding Enterprise Service Management, IT Service Management, and IT Security.

Credits:
Sound engineering by Alan Southgate - http://alsouthgate.co.uk/

Graphics by Yulia Kolodyazhnaya

What happens when a cyber-physical threat crosses Cybersecurity, Physical Security, Facilities and IT Operations? This episode explores how SOC teams can correlate signals, establish incident ownership, define escalation thresholds and build a unified operating model to protect critical infrastructure and business services.

In this episode, we answer to:
If Physical Security sees one part of an attack and the SOC sees another, who sees the whole threat?
When multiple departments are involved in the same security event, who owns 100% of the incident and its outcome?
How should organizations respond to cyber-physical threats before they cause an outage, compromise or business impact?

Resources Mentioned in this Episode:
Le Monde website, article "France scales up anti-drone measures to industrial level as threat rises", link https://www.lemonde.fr/en/economy/article/2026/03/10/france-scales-up-anti-drone-measures-to-industrial-level-as-threat-rises_6751296_19.html

ABJ Academy website, article "Can Private Security Shoot Down Drones?", link https://abjacademy.global/drone-blog/can-private-security-shoot-down-drones/

GOV.UK website, article "£1.85 million competition launched to counter illegal UAS use around prisons and sensitive sites", link https://www.gov.uk/government/news/185-million-competition-launched-to-counter-illegal-uas-use-around-prisons-and-sensitive-sites

Frost & Sullivan website, report "Dedrone Final Report", link https://www.frost.com/wp-content/uploads/2025/08/Dedrone-Final-Report.pdf

Dedrone website, page "Critical Infrastructure", link https://www.dedrone.com/industry/critical-infrastructure

C-UAS Hub website, article "Telecom Giant Orange Enters Counter-Drone Market with ‘As-a-Service’ Model", link https://cuashub.com/en/content/telecom-giant-orange-enters-counter-drone-market-with-as-a-service-model/

Connect with me on:
LinkedIn: https://www.linkedin.com/in/theitsmpractice/
Website: http://www.theitsmpractice.com
And if you want more tips and guidance, follow me on LinkedIn. I am sharing daily posts regarding Enterprise Service Management, IT Service Management, and IT Security.

Credits:
Sound engineering by Alan Southgate - http://alsouthgate.co.uk/

Graphics by Yulia Kolodyazhnaya

Does your SOC really protect the entire business, or does its visibility stop at the firewall? In this episode of The ITSM Practice Podcast, Luigi Ferri explores drone threats against data centers and what they reveal about gaps between Cybersecurity, Physical Security, Facilities, IT Operations and Business Continuity. Discover why CISOs need to rethink the traditional cyber attack surface and focus on protecting the complete service.

In this episode, we answer to:
Where should the SOC security perimeter really end?
How can CISOs identify the true attack surface of a critical business service?
Who owns the incident when Cybersecurity, Physical Security and Facilities each detect different parts of the same threat?

Resources Mentioned in this Episode:
Bird & Bird website, article "European Commission Counter-UAS Action Plan", link https://www.twobirds.com/en/insights/2026/uk/european-commission-counter-uas-action-plan

Commercial UAV News, article "How Counter-UAS Infrastructure Is Building the Foundation for Commercial Drone Operations", link https://www.commercialuavnews.com/counter-uas-europe-commercial-drone-infrastructure

Digitalisation World website, article "Drones and Datacenters: An Unexpected Aerial Adversary Amidst the AI Boom", link https://digitalisationworld.com/blogs/58771/drones-and-datacenters-an-unexpected-aerial-adversary-amidst-the-ai-boom

BBC News, article "Amazon Says Drones Damaged Three Facilities in UAE and Bahrain", link https://www.bbc.com/news/articles/cgk28nj0lrjo

DW website, article "Germany Investigates Drone Flights Over Industrial Park", link https://www.dw.com/en/germany-investigates-drone-flights-over-industrial-park/a-70021895

Maris-Tech website, article "CUAS (Counter Unmanned Aerial Systems): A Complete Guide for Defense & HLS Teams", link https://www.maris-tech.com/blog/cuas-counter-unmanned-aerial-systems-a-complete-guide-for-defense-hls-teams/

Connect with me on:
LinkedIn: https://www.linkedin.com/in/theitsmpractice/
Website: http://www.theitsmpractice.com
And if you want more tips and guidance, follow me on LinkedIn. I am sharing daily posts regarding Enterprise Service Management, IT Service Management, and IT Security.

Credits:
Sound engineering by Alan Southgate - http://alsouthgate.co.uk/

Graphics by Yulia Kolodyazhnaya

AI that summarizes an incident is one thing. AI that disables accounts, isolates endpoints and blocks connections is another.
In this episode of The ITSM Practice Podcast, Luigi Ferri explains the ITIL 5 6C Model for AI and why CIOs, CISOs and MSPs need to stop asking, “Are we using AI?” and start asking, “What are we allowing AI to do?”

In this episode, we answer to:
What is the ITIL 5 6C Model for AI?
How much authority should MSPs give AI to decide and act?
Who is accountable when autonomous AI gets a decision wrong?

Resources Mentioned in this Episode:
ITIL website, article "AI Governance in Organizations", link https://www.itil.com/Itil-News-and-Announcements/itil-ai-governance-organizations

ITIL website, white paper "ITIL AI Governance White Paper", link https://www.itil.com/-/media/itilsite/site-assets/documents/itil-ai-governance/itil-ai-governance-white-paper-2025.pdf

PeopleCert Community website, article "AI Governance in Service Management", link https://community.peoplecert.org/home/clubs/itil/blogs/ai-governance-in-service-management

PeopleCert Community website, article "What ITIL AI Governance Teaches Us About Maturity in an AI-Enabled World", link https://community.peoplecert.org/public/clubs/itil/blogs/what-itil-ai-governance-teaches-us-about-maturity-in-an-ai-enabled-world

ITIL website, article "Governing AI in organizations – new ITIL guidance is making a difference", link https://itil.com/Itil-News-and-Announcements/itil-version-5-ai-governance-guidance

ITIL website, article "ITIL AI Governance (Version 5): categorizing and assessing AI, and deploying appropriate controls", link https://www.itil.com/Itil-News-and-Announcements/itil-version-5-ai-governance-controls

PeopleCert Community website, article "ITIL (Version 5): A Value Stream Perspective", link https://community.peoplecert.org/public/clubs/itil/blogs/itil-version-5-a-value-stream-perspective

Connect with me on:
LinkedIn: https://www.linkedin.com/in/theitsmpractice/
Website: http://www.theitsmpractice.com
And if you want more tips and guidance, follow me on LinkedIn. I am sharing daily posts regarding Enterprise Service Management, IT Service Management, and IT Security.

Credits:
Sound engineering by Alan Southgate - http://alsouthgate.co.uk/

Graphics by Yulia Kolodyazhnaya