UnHacked Episode 69 Summary
What if you discovered your business was paying $24,000 annually for IT protection that didn't exist? In this eye-opening episode of UnHacked, Phoenix IT Advisors CEO Justin Shelley shares the most shocking audit discovery of his 25+ year career - a story that will make every business owner question whether they're truly getting what they pay for from their IT provider.
The Horror Story That Started It All
Justin recounts discovering a 34-computer business paying $2,000 monthly for managed IT services while receiving absolutely nothing in return:
- No verifiable backups for their critical SQL server containing their entire business
- Windows 7 computers (discontinued years ago) with three unlicensed installations
- Zero antivirus protection on servers housing their most critical data
- Failing Active Directory with synchronization errors throughout the network
- No monitoring - servers would go down over weekends with no notification
- No patch management beyond basic Windows updates
"They may as well take that $2,000 and light it on fire every month," Justin explains. "At least then they'd know they're getting nothing for their money."
Your Action Plan: Questions That Reveal the Truth
Bryan Lachapelle, CEO of B4 Networks, joins Justin to provide a practical framework for evaluating your IT provider:
Essential Quarterly Reviews Should Include:
- Backup verification reports showing success/failure rates
- Patch management status for all software (not just Windows)
- Security update reports with gap analysis
- 90-day technology roadmap with replacement schedules
- Business improvement initiatives using technology
Critical Questions Every Business Owner Must Ask:
- "What cybersecurity framework do you follow?" (Red flag: deer-in-headlights look)
- "Show me your documented processes and procedures"
- "Provide monthly backup success/failure reports"
- "What's our 90-day technology improvement plan?"
The Simple Test That Reveals Everything
Bryan shares a brilliant verification technique: "Once a month, 'accidentally' delete a file and ask your IT provider to restore it. If they can't, that's a massive red flag."
Why This Matters More Than Ever
Unlike doctors, lawyers, or electricians, IT service providers require zero licensing or certification to operate. This unregulated industry means business owners must become educated consumers or risk their company's survival.
"One wrong move and you can be financially devastated," Justin warns. "Your business is your greatest asset - you cannot afford to trust blindly."
Framework-Based Protection: Your Safety Net
The hosts emphasize following established cybersecurity frameworks like CIS Controls (140+ security measures) rather than hoping your provider has their own standards. A legitimate MSP should easily explain:
- Which framework they follow
- Current implementation status
- Gap analysis and remediation plans
- Timeline for improvements
The Bottom Line
Response time complaints are usually just symptoms. The real problem is typically a complete lack of basic IT hygiene, monitoring, and security controls. If your business depends on technology (and whose doesn't?), you need verification systems in place.
Don't wait for a breach to discover you've been paying for protection that doesn't exist.
Ready to Verify Your IT Protection?
Phoenix IT Advisors offers comprehensive cybersecurity risk assessments that reveal exactly where your business stands. Don't assume your current provider is protecting your greatest asset - verify it.
Schedule your free security assessment today and mention UnHacked.