Jack Thompson

A Cynomi Certification for MSPs, MSSPs, and vCISOs Ready to Prove Their Value at Every Stage of the Client Relationship

Cyber advisory is converging. Risk, security, and compliance are no longer separate conversations you have with a client. They're one conversation, and the practices that win are the ones that can hold all three at once. This certification is built for that shift. Over three parts, this session covers the business strategy conversation that opens a client relationship, the AI-driven execution that scales it, and the warranty and insurance outcomes that prove it. You’ll be presented and certified in a full loop fromstrategy to warranty.

This is CISO Intelligence: not a single tool or a single deliverable, but the layer that sits underneath everything a modern advisory practice does: how you assess, how you plan, how you execute, and how you prove the outcome. Attendees leave with a certification, a repeatable framework, and hands-on experience they can put in front of a client immediately.

Part One — Business Strategy: BIA/BCP as the Foundation

Every strong advisory engagement starts with the business, not the technology. This module trains you to run Business Impact Analysis and Business Continuity Planning as a strategic conversation - the one that earns you a seat with leadership instead of just IT. You'll learn how to frame risk in business terms clients act on, and how a well-run BIA/BCP becomes the strategic foundation the rest of the engagement is built on.

Part Two — AI Insights and Co-Worker Execution: Hands-On in the Cynomi Platform

This is the execution module, run live in Cynomi demo environments. You'll work in small groups to see the quality and scale that's possible when AI takes on the repeatable work of an advisory practice, freeing your team's time for the judgment calls only they can make. This section is built to answer the question every practice leader is asking right now: what does AI change about how I deliver, and how good is good enough to put in front of a client?

Part Three — MSP Service Warranty: Differentiation, Credibility, and Financial Proof

The final module covers how to turn your practice into a differentiated, warrantied service. You'll learn how service warranties give clients a tangible guarantee behind your work, how that credibility passes through to real financial benefit, including reduced cyber insurance costs for you and your clients, and how to position warranty as the proof point that separates your practice from every MSP still selling on price.

The Certification

Completion earns the Cynomi CISO Intelligence Certification, recognizing practices that can operate across the full arc of modern cyber advisory: strategic, AI-enabled, and warrantied. This isn't a badge for finishing a class. It's evidence you can show a client, a partner, or an insurer that your practice understands their environment and can prove it, end to end.

Led By

• Tim Coach: MSP Operator and Chief Evangelist, Cynomi
• Jack Thompson: Field CISO, Cynomi; former CISO, Indianapolis Colts

For MSPs, MSSPs, and vCISOs looking to optimize efficiency, free up capacity, and standardize delivery without losing the judgment that makes advisory work valuable, this certification is the holistic look at your practice - beginning to end - with a credential to prove what you've built.

Most MSPs assess risk through the lens of cyber telemetry: endpoints, networks, cloud. But the incidents that damage clients increasingly start somewhere else - a propped door, a badge reader on a flat network, a camera or access-control panel that's never been patched or even inventoried. These are physical and OT systems, and they sit outside the scope of a standard vulnerability scan or pen test, which means most MSPs have no method for finding this exposure before an attacker does.

It's also getting worse fast. As clients race to deploy AI-enabled cameras and sensors, automated access control, and connected robotics, they're adding OT and IoT to their environments faster than most MSPs' service catalogs account for, and every one of those devices has a network path back into the systems MSPs already manage.

This session gives MSPs a working method for finding and acting on that exposure. Jack Thompson, Field CISO at Cynomi, and Alan McDonald, CEO of AllConnected, will walk through how to inventory converged physical-cyber-OT risk inside a client's existing footprint, the specific questions that surface it, and how to raise it with a client's internal security team as a collaborator rather than a competitor.

Attendees will leave with:

• A repeatable framework for inventorying physical, OT, and IoT exposure inside a client's existing network footprint

• A specific set of assessment questions covering badge systems, camera networks, building automation, and connected OT/IoT devices

• A model for engaging a client's internal security team on converged risk without stepping on their scope
• Real examples of how surfacing this risk has changed contract scope and value for MSPs already doing this work