Preparing for Regulation, Tougher Advice, and Training

I recorded this episode at Barracuda TechSummit25 in Alpbach, Austria, a mountain village that looks like a postcard and hosts some of the most grounded security conversations you will hear all year.

My guest is Richard Flanders, Commercial Director at Aura Technology, a managed service provider on the south coast of England that supports public sector organisations and tightly regulated commercial clients. Richard arrived as part of Barracuda’s Partner Advisory Board, which means he spends as much time feeding customer reality back into product teams as he does comparing notes with peers in the hallway.

We talk through his first TechSummit experience and why the event’s focus on hands-on engineering matters for MSPs who live in the weeds of configuration, policy, and response. Richard shares early thoughts on Barracuda’s secure edge service and the continued maturation of XDR, but the heart of our chat is the pressure he sees on customers. Compliance is no longer a side quest. ISO 27001, Cyber Essentials Plus, supply chain reporting, and new European rules are shaping budgets and expectations. Boards want proof. Auditors want evidence. Buyers want to know a supplier chose fit-for-purpose tools. That makes documentation, contracts, and the ability to show your working as important as the tech itself.

We also get into the human side. In a world that loves point solutions, many teams are tired of alert noise and tool sprawl. Richard explains why a single, coherent view helps his engineers move faster and train better, and why MSPs are leaning into prevention-focused workflows rather than waiting for the next fire. He is candid about the conversations no one enjoys, like end-of-life systems that keep a legacy app alive, and the need for tougher stances when risk sits outside an acceptable boundary.

AI comes up too, without the hype. Aura is hiring a Head of AI and Automation, standing up a private AI platform, and committing to ship a handful of small, useful apps for customers in the year ahead. The lens is productivity and safety, with an emphasis on teaching teams how to question outputs and rethink everyday tasks. Add in security awareness training, phishing simulations, and tabletop exercises, and you start to see a culture shift from annual tick-boxes to regular, lived practice.

There is a lovely moment of serendipity in here as well. Richard’s first conversation on day one was with another partner from Pune, the same city where Aura runs its network operations. They swapped ideas on automation and integration that might never have surfaced on a video call. That is the value of getting people in a room together, especially when the room happens to be carved into the side of a mountain.

If you work with an MSP, this episode will help you ask better questions. If you are an MSP, you will recognise the balance Richard describes. Pick the right controls for the risks you actually face. Prove what you do. Keep training. And give your teams a single place to see what matters, so the next incident stays small.

*********

Visit the Sponsor of Tech Talks Network:

Land your first job  in tech in 6 months as a Software QA Engineering Bootcamp with Careerist

https://crst.co/OGCLA