Ronan McCurtin, RVP EMEA, Acronis, talks about the evolving MSP security model and how Acronis is supporting it.
What are the biggest security challenges MSPs face today compared to just a few years ago?
A few years back, it was enough for MSPs to keep systems patched, install endpoint protection and ensure backups were working. Now? That’s just the starting point. The attack surface for the cyber threat landscape has grown significantly. Threat actors have become faster, smarter, and more resourceful. MSPs are now on the front lines of defending clients against ransomware, credential theft, and increasingly sophisticated phishing scams. What used to be rare is now routine. Added to this, MSPs bear more responsibility for their clients’ environments, and this will only increase going forward.
Attackers are using automation, AI and deep knowledge of IT environments to gain a foothold without raising alarms. They know how MSPs operate, and they target shared infrastructure, RMM tools, and backup systems. That’s why we’re seeing a shift from opportunistic attacks to well-planned intrusions. MSPs need to be just as agile and advanced in their defences.
Clients expect a lot more now. They’re asking their MSPs to go beyond troubleshooting and act more like virtual CISOs. That means providing strategic guidance, risk assessments, compliance help, and security-first architectures. Clients are more aware of the risks, and they want proactive partners, not reactive.
How are MSPs leveraging AI and automation to improve threat detection and response times?
AI is being used everywhere, and MSPs are no different. They’re using it to flag real threats faster and even trigger automated responses. Without it, it’s almost impossible to keep up with the volume of alerts and events flooding in daily. Automation is also key as it speeds up everything from patching to incident remediation.
Endpoint protection and identity are big ones. AI helps spot unusual behaviour like a login from an unexpected location or an executable trying to move laterally across the network. But it’s also having a real impact in backup and recovery, by identifying anomalies in backup integrity or spotting signs of ransomware encryption patterns.
AI-based scripting is a big help. For example, there are now tools that let MSPs generate PowerShell or Bash scripts just by typing what they need in plain English. That kind of automation frees up engineers from repetitive tasks and lets them focus on bigger security priorities. AI also helps to focus on the important alerts whilst managing the less significant ones automatically.
What does a ‘resilience-led’ approach look like for MSPs in 2025 and beyond?
It means building systems that assume attacks will happen and making sure your clients can bounce back quickly. It’s not just about prevention anymore; it’s about detection, response, and recovery. Resilience-led MSPs don’t just keep threats out; they prepare for how to operate when systems are under fire.
When you have users working from everywhere, like homes, cafés, and airports, then you need layered protection and fast recovery options. If something goes wrong, clients want reassurance that downtime will be minimal and that data will be safe. Without that, trust erodes fast.
MSPs will increasingly act as managed security providers, not just IT service providers. That shift means new investments in security skills, tools, and platforms. We’ll also see more pressure from regulations and insurance providers, and greater client demand for outcome-based SLAs around security and resilience.
What do MSPs need most from security vendors like Acronis today?
Simplicity, integration and flexibility. MSPs don’t want 10 different tools stitched together; they want unified platforms that save time and reduce noise. Support matters and vendors need to feel like partners, not just providers.
We’re focusing on ease of use, better automation and proactive support. That includes tools that handle compliance tasks, billing simplicity and new integrations to cut down on manual work. We’re also providing education around new regulations like NIS2 and DORA, because helping MSPs stay compliant is now just as important as keeping them secure.
We’re building compliance-friendly features directly into our platform, from audit logs to automated security policies. These help MSPs demonstrate compliance without burning hours on paperwork. As regulations tighten, having that built-in advantage will be key.
PCR Tech and IT retail, distribution and vendor news