"We only turned up the alarm": on MSP Insights with Olaf Kaiser
KAEMI founder Sven Launspach on Olaf Kaiser's podcast MSP Insights: from reactive network security to Zero Trust, SASE/SSE and security you don't feel.
I was a guest on Olaf Kaiser's podcast "MSP Insights" (in German). What came out of it was a conversation about something that has been on my mind for years: why so many companies still think about network security from the wrong end — from the alarm rather than the architecture.
"We only turned up the alarm — instead of fitting more locks."
That image sums up what I see in many networks. For years the investment went into detection: more sensors, more alarms, more dashboards. None of that is wrong — but it is reaction. By the time the alarm goes off, the attacker is already inside. The real question comes earlier: which doors are open at all, and do they need to be?
From the internal network to the communication relationship
The classic approach splits the world into inside and outside: dangerous outside, trusted inside. That assumption no longer holds the moment a single access is compromised — then the flat interior becomes a highway.
"For me there is no internal network any more — only communication relationships that we have to secure."
That is the essence of Zero Trust : trust is not decided by a location in the network, but connection by connection, permitted only where it serves a purpose. "Inside is inside" becomes "what really needs to talk to what". And it is enforced at the workload, not at a zone boundary — the step from the louder alarm to the actual lock.
Reacting was yesterday, designing is today
In the podcast we traced the arc from classic network security through Zero Trust to SASE/SSE . The common thread: away from reacting to incidents, towards deliberately designing the security architecture from the outset. SASE/SSE moves inspection and policy into the cloud, close to users and sites — security becomes part of the path, not an afterthought checkpoint.
What mattered to me was staying practical: this is not just for large enterprises. Especially in mid-sized companies and SMEs, a data-driven approach — first make the actual data flows visible, then set the rules — creates real security without overwhelming the IT team.
Security you don't feel
One point that Olaf and I both care about is the role of users.
"Security only works if the user has as little to do with it as possible."
Any security measure that gets in the way will be worked around — that is not malice, it is human. Good security is therefore invisible: it lives in the architecture, not in extra clicks. Build it right and the secure path becomes the easiest one.
Listen in
The conversation with Olaf was great fun — many thanks for the invitation and the good questions. The episode (in German) is available here:
Want to dig into the topics in a conversation? Get in touch . And to see how the idea of real locks translates into practice, take a look at our microsegmentation offering .
