VDI as the workhorse
Move VDI from a standalone SKU to the central delivery layer for applications, data, and controlled user sessions.
Turn virtual desktops into business growth
Rethinking VDI
How MSPs Can Stop Selling One-Off Deployments and Start Selling Compliance-Driven Solutions
VDI does not have to be another price-compared line item. The book reframes it as the delivery engine for a complete solution built around regulated workloads, cybersecurity controls, and measurable business outcomes.
- MSP Strategy
- Compliance
- VDI
- Cyber Insurance
RETHINKING VDICHRISTOPHER L. BUFORD
The central reframe
VDI was never the whole product.
When an MSP sells VDI by itself, the conversation can collapse into features and price. Rethinking VDI shows how to reposition the platform as the workhorse behind a broader, compliance-driven solution.
The book connects the technology to vertical focus, packaging, pricing, positioning, sales conversations, and delivery.
Inside the book
Build the offer around the outcome, not the parts.
The framework starts with a narrow regulated sub-vertical, then builds a packaged offer around the specific compliance or risk problem that market must solve.
Niche down further
Target smaller feeder markets and sub-verticals with specific regulatory requirements instead of competing across broad industries.
Backup & recovery
Connect recovery and business continuity to the complete solution rather than selling backup as an isolated line item.
Contained AI access
Use the VDI session as a controlled environment for AI access and address shadow-AI risk as part of the larger offer.
Secure access & zero trust
Wrap the delivery environment with access verification and zero trust controls that support the intended compliance outcome.
Package, price, and sell
Move from line-item pricing to a single packaged outcome, then position and sell it around the client’s business risk.
One architecture. Multiple business cases.
A delivery engine for secure, regulated work.
In the book’s model, the VDI environment carries most of the delivery burden. Backup, secure browser capabilities, contained AI access, and zero trust controls connect to or wrap around that environment.
For manufacturing and CMMC, the same pattern can become a tightly scoped secure enclave for Controlled Unclassified Information, keeping the assessment boundary smaller and more defensible.
VDIDelivery Engine
Secure Access
Backup & Recovery
Contained AI
Zero Trust
Compliance
Cyber Insurance
Four core examples
Go narrower than “we do healthcare” or “we do manufacturing.”
A second sales angle
Compliance is not the only reason the buyer cares.
Cybersecurity insurance
The book connects the same access, segmentation, backup, recovery, and AI-control practices to the kinds of technical-control questions clients face when applying for or renewing cyber insurance.
That gives an MSP a complementary way to frame the solution for clients who may not lead with regulatory compliance.
The book
Front and back cover
Built to be used
Strategy, story, and an action step at the end of every chapter.
Each chapter opens with a scene from a fictional MSP owner’s journey, moves into direct teaching that stands on its own, and closes with a worksheet, reflection, or real-world action step.
The result is a business book designed to move the reader from idea to implementation.
Questions MSP owners ask
Rethinking VDI - FAQ
Who is this book written for?
MSP owners who want to move away from selling isolated VDI deployments and build packaged, outcome-based solutions for narrower regulated markets.
What is the core idea?
VDI becomes the delivery engine for a larger solution rather than the entire product. Other controls and services connect to it or wrap around it to solve a defined compliance or risk problem.
Does the book only apply to healthcare?
No. The core examples include healthcare, behavioral health, financial services and RIAs, and manufacturing.
Where does CMMC fit?
The manufacturing example uses VDI as a secure enclave for CUI so the compliance boundary can be contained rather than spread across every endpoint and device.
Why does the book discuss cyber insurance?
The same access, segmentation, backup, recovery, and AI-control practices can support responses to common cyber-insurance underwriting questions, creating a complementary business case for the MSP’s packaged offer.
Is this mainly a technical book?
No. The architecture is only part of the framework. The book also covers vertical selection, offer packaging, pricing, positioning, sales conversations, and rollout planning.
Stop selling the tool. Sell the outcome.
Rethink what VDI can become inside an MSP services business.
By Christopher L. Buford