This session will explore how corporate information security rules break down when applied to SMBs, where IT is often outsourced to MSPs and the consequences of security decisions aren't fully understood. Attendees will learn how MSPs and SMBs creatively manage security with unconventional infrastructures, and gain insights on how to align vendor expectations with real-world security practices.