Choosing a Vendor/Service Provider

Tips for choosing hardware and software vendors and service providers

Enlisting Outside Support to Manage Cybersecurity Risk – a five-part series on using outside firms to reduce your cybersecurity risk

• Part 1- Should I Get Outside Support to Manage My Cybersecurity Risk? – guides the reader through the process of determining if they need outside cybersecurity help.
  Cyber Readiness Institute
• Part 2- An Introduction to Outside Firms that Offer IT and Cybersecurity Support - lists the types of support companies and a brief description of the services they offer
  Cyber Readiness Institute
• Part 3- How to Select the Right Level of Outside Support - provides instructions on how to select the right level of outside support
  Cyber Readiness Institute
• Part 4- Understanding Your Cybersecurity Vendor Contract - provides insight into what you should look for in the support contract
  ​​​​​​​Cyber Readiness Institute
• Part 5- Managing the Relationship with Your Outside Cybersecurity Provider - provides guidance on how to successfully manage the relationship with the service provider
  Cyber Readiness Institute  

Guidance for MSPs and Small- and Mid-sized Businesses – provides mitigation and hardening guidance to help these organizations strengthen their defenses against cyberattacks
CISA (Cybersecurity & Infrastructure Security Agency)

Vendor security – tips to make sure business vendors with access to your sensitive business information are securing their own computers and networks
Federal Trade Commission

Hiring a Webhost – what to look for when hiring a webhost provider
Federal Trade Commission