Companion volume · Ed. 2026
TheBlastRadius
Incident response for managed service providers.
Daniel Ramos
Daniel Ramos · CTO, Intelligent Automation
Every incident plan ever written assumes one organization, one estate, one legal entity and one person who can say yes. If your firm holds standing administrative access into other companies' estates, all four are false at once. Six parts, five provider-side playbooks, and 60 tiered readiness controls you can score against yourself.
Free, in full, no email wall. No registration, no gated download, nothing withheld.
Every one written to be opened on its own, by someone who has not read the rest.
PB-MSP-PLATFORM, your RMM or PSA is compromised. PB-MSP-CROSS, cross-tenant lateral movement. PB-MSP-GDAP, delegated admin relationship abuse. PB-MSP-TECH, technician account compromise. PB-MSP-VENDOR, your upstream vendor is compromised.
The contractual, insurance and regulatory exposure, in operational language.
Authority matrices, escalation design and the tranche plan for notifying forty clients.
Three nights, clock-stamped, with the decisions named and the authority written down.
Half of this is what you should be demanding. Read it from the other chair.
The main volume — twenty-one chapters for defending a single organization.
If it is useful, use it. Quote it, print it, hand it to your team.