IT Solutions, Support, & Security Blog | iCorps Technologies

How AI Is Changing IT Support, Cybersecurity, and Compliance

jlauria@icorps.com (Jeffery Lauria) — Tue, 29 Sep 2026 13:00:02 GMT

Global consulting firm Deloitte identified Artificial Intelligence (AI) as a top tech trend for 2026, emphasizing that AI is increasingly moving from experimentation to adoption.

In the age of AI, data intelligence transforms almost every aspect of technology, from IT operating models to how companies develop cybersecurity strategies and enforce regulatory compliance.

However, AI also introduces risk into IT environments, influencing the way companies must approach AI to be successful.

This article explores how AI is affecting IT support, cybersecurity, and compliance, and why working with a managed IT firm is crucial for achieving these goals.

Managed service providers (MSPs) incorporate AI models into their processes to perform predictive maintenance, reduce risk, and enforce compliance.

Configure for What You Need and Prepare for What Could Go Wrong

jlauria@icorps.com (Jeffery Lauria) — Tue, 15 Sep 2026 14:00:02 GMT

I was on a call recently with a client who wanted to talk about protecting the business against the next headline breach. The conversation moved, as these conversations usually do, toward best practices and the technology stack that supports them. Somewhere in the middle of it, Microsoft Purview and its data loss prevention capabilities came up, and the client described Data Loss Prevention (DLP) the way most people still describe it: a tool for catching an employee who accidentally emails a spreadsheet full of account numbers to the wrong person, or who drags a folder of client files onto a personal drive without thinking twice.

That framing is not wrong, but it is incomplete, and the gap between complete and incomplete is where a lot of businesses absorb losses they never budgeted for.

Prompts and Skills Are Not the Same Thing, and Understanding the Difference Will Change How You Use AI

jlauria@icorps.com (Jeffery Lauria) — Tue, 08 Sep 2026 14:00:00 GMT

When people first start using AI tools, almost all the advice they hear centers on one idea, write a better prompt. That advice is not wrong, but it is incomplete and, increasingly, only half the story. As these platforms have matured, a second concept has become just as important, and most business users have not caught up to it yet. That concept is the skill, and understanding how it differs from a prompt will change how effectively you use these tools.

Let me start with an analogy I use with clients because it tends to make this click quickly.

Choosing an AI Model Is the Easy Part. Governing It Is What Matters

jlauria@icorps.com (Jeffery Lauria) — Tue, 01 Sep 2026 14:00:00 GMT

Every week, I sit down with a business owner or an IT director who wants to talk about artificial intelligence, and the conversation almost always starts the same way. Which one should we use, Copilot, ChatGPT, or Claude? It is a fair question, and it deserves a real answer. But in my experience, it is also the second most important question these organizations should be asking. The first, which almost nobody leads with, is what happens to our data once we turn this on and who is actually watching it.

I want to address both because you genuinely need to understand the tools before you can govern them properly, and you need to govern them before you should use them for anything that touches client data, financial records, or intellectual property. Let me walk through what I tell clients on both fronts.

Starting with the tools themselves, since that is usually the entry point.

Your Voicemail Greeting Is Working for the Attackers Now

jlauria@icorps.com (Jeffery Lauria) — Tue, 25 Aug 2026 14:00:02 GMT

For years, the standard advice for a professional voicemail greeting was to record it yourself, state your name and company clearly, and sound approachable. That advice made sense when the worst thing a caller could do with your greeting was hang up. It no longer makes sense today, and I want to walk through why, because the reasoning matters more than the rule.

Modern voice cloning platforms require remarkably little source material to produce a usable result. Transaction Network Services and others have documented that roughly three seconds of clean audio is enough to produce a convincing synthetic copy of a person's voice. Three seconds. Your voicemail greeting, the one that says "Hi, you've reached Jeff Lauria at iCorps Technologies, please leave a message," runs longer than that and hands an attacker three things in a single phone call they never had to answer: a clean voice sample, your full name, and your employer. They now know who you are, where you work, and what you sound like, and they collected all of it without speaking to a human being. From there the workflow is unfortunately simple. A quick pass through LinkedIn fills in your title and your reporting relationships, and the attacker has everything required to place a call to your controller, your service desk, or your family that sounds exactly like you.

The Part of the Breach Nobody Investigates

jlauria@icorps.com (Jeffery Lauria) — Tue, 18 Aug 2026 14:00:00 GMT

The response to a credential compromise has become almost muscle memory. An account gets phished, the alert fires, and within an hour someone has reset the password, revoked the active sessions in Entra ID, pulled the inbox rules the attacker created, run an endpoint sweep, and checked the sign in logs for anything else coming from that same address in Lagos or Ho Chi Minh City. If the environment is well run, the whole thing closes inside two days with a short summary for the client and a note about retraining the user.

That work is necessary. It is also, in a growing number of cases, incomplete in a way that nobody notices until much later.

The reason is simple. Incident response still tends to treat the compromise as a problem located in a device or a directory object. We ask what the attacker did on the laptop and what the attacker did inside the tenant. We rarely ask the harder question, which is what that single set of credentials actually opened across the rest of the business. And in most mid market environments I work with, the identity provider covers maybe sixty percent of the software people touch every day. The rest sits outside single sign on, authenticated by a password the user chose, and in a depressing number of cases that is the same password now sitting in an attacker's notes.

When the Account Falls, the AI Does the Searching

jlauria@icorps.com (Jeffery Lauria) — Tue, 11 Aug 2026 17:45:03 GMT

For most of the last decade, the first hour of a business email compromise investigation followed a familiar path. We pulled the sign in logs, looked for inbox rules that quietly moved anything containing the word "invoice" into the RSS Feeds folder, checked for new mail forwarding, reviewed OAuth consent grants, and then went looking at what the account touched in SharePoint and OneDrive. The attacker in that scenario had a real constraint working against them. They had to hunt. They had to guess at file naming conventions, scroll through folders built by people who never expected an outsider to read them, and open documents one at a time hoping something valuable was inside. Time was on our side, at least a little.

That constraint is gone.

When an attacker takes over an account in a tenant with Microsoft 365 Copilot or a similar assistant enabled, they no longer have to search like an intruder. They can ask questions like an employee. Copilot reaches whatever the signed in user can reach through Microsoft Graph, which means the attacker inherits that reach the moment they inherit the session. The questions are not sophisticated, and that is exactly the problem. Where do we keep our banking and wire instructions. Which documents mention the acquisition. Summarize our cyber insurance policy including the limits. Who approves payments over fifty thousand dollars. Show me any file that contains a password or an API key. Work that used to take a patient adversary several days now takes a few minutes, and it produces better results than manual hunting ever did.

Microsoft Edge for Business: The Managed Browser You Already Own

jlauria@icorps.com (Jeffery Lauria) — Tue, 04 Aug 2026 14:00:00 GMT

Most of the work in a modern company now happens inside a browser tab. Email, client portals, payroll, CRM, and now AI assistants all run there, which makes the browser the single largest channel through which corporate data moves. It is also, in many organizations, the least governed software on the machine. We patch operating systems and encrypt laptops, then hand employees an unmanaged browser and hope discipline holds.

A whole vendor category has grown up around that gap, and those dedicated enterprise browsers are capable products with price tags to match. But before adding another subscription, organizations already running Microsoft 365 should look hard at what they license today. Microsoft Edge for Business, managed through the Microsoft 365 admin center and enforced with Microsoft Purview, covers more of this ground than most IT leaders assume, and much of it at no incremental cost.

iCorps Recognized in BBJ’s 2026 IT Consulting Firms Ranking

iCorps Technologies — Tue, 28 Jul 2026 14:00:02 GMT

Boston, MA — July 28, 2026 — iCorps Technologies, Inc., a leading provider of outsourced IT services, expertise, and proven solution offerings in major markets along the Northeast Corridor, has been ranked #8 by the Boston Business Journal (BBJ) as one of the region’s top largest IT consulting firms. BBJ’s rankings include firms that are paid to independently diagnose and solve clients' IT-related problems, providing full project management and oversight.

Modern IT Governance: Protecting Your Business in a Fast-Moving Boston Economy

iCorps Technologies — Tue, 14 Jul 2026 14:00:00 GMT

Effective IT governance establishes a framework of policies and controls that align your technology investments with your long-term business goals. In a high-stakes environment like the Boston-New York corridor, this means moving beyond basic support to a model where technology actively drives growth. A structured approach to governance minimizes risk, secures sensitive data, and ensures every dollar spent on IT contributes to the bottom line.