From plan to practice to prevail: my conversation with Chris Johnson, host of the MSSP 1337 podcast

In cybersecurity, prevention often gets most of the attention.

But no matter how strong your defenses are, incidents will happen. And how you respond in that moment of truth defines resilience.

That’s why I really connected with a framework Chris Johnson shared with me on the MSSP 1337 podcast, the 3 P’s – plan, practice, prevail.

• Plan: It starts with a robust incident response plan. Without it, tabletop exercises won’t deliver value.
• Practice: With a plan in place, tabletop exercises become the proving ground, helping teams uncover gaps and build the confidence they need.
• Prevail: That combination of planning and practice is what makes the difference when a live incident hits.

In this episode, Chris and I discuss practical ways MSPs can start building actionable plans, designing exercises that go beyond “checkbox” drills, and ultimately creating the kind of resilience that lets you prevail.

🎧 Listen to the full episode here