Choosing a Vendor/Service Provider

Tips for choosing hardware and software vendors and service providers

Enlisting Outside Support to Manage Cybersecurity Risk – a five-part series on using outside firms to reduce your cybersecurity risk

• Part 1- Should I Get Outside Support to Manage My Cybersecurity Risk? – guides the reader through the process of determining if they need outside cybersecurity help.
  Cyber Readiness Institute
• Part 2- An Introduction to Outside Firms that Offer IT and Cybersecurity Support - lists the types of support companies and a brief description of the services they offer
  Cyber Readiness Institute
• Part 3- How to Select the Right Level of Outside Support - provides instructions on how to select the right level of outside support
  Cyber Readiness Institute
• Part 4- Understanding Your Cybersecurity Vendor Contract - provides insight into what you should look for in the support contract
  Cyber Readiness Institute
• Part 5- Managing the Relationship with Your Outside Cybersecurity Provider - provides guidance on how to successfully manage the relationship with the service provider
  Cyber Readiness Institute  

Guidance for MSPs and Small- and Mid-sized Businesses – provides mitigation and hardening guidance to help these organizations strengthen their defenses against cyberattacks
CISA (Cybersecurity & Infrastructure Security Agency)

Vendor security – tips to make sure business vendors with access to your sensitive business information are securing their own computers and networks
Federal Trade Commission

Hiring a Webhost – what to look for when hiring a webhost provider
Federal Trade Commission

Defense Industrial Base Managed Service Provider Shopping Guide for Small & Medium-Sized Businesses –This content was developed by member company participants of the National Defense Information Sharing & Analysis Center (ND-ISAC) to assist and inform small and medium-sized businesses (SMBs) in selecting a Managed Service Provider (MSP) which can assist SMB compliance with evolving Department of Defense (DoD) cybersecurity requirements. 

National Defense Information Sharing & Analysis Center (ND-ISAC)