02/06/2026
GAINING CONFIDENCE IN YOUR MSP
Outsourcing IT services provides both increased benefits and risk to an organisation.
If you’re using an MSP to manage your cloud services, the minimum bar you should aim for is ‘avoid adding unnecessary risk’. You should hold your MSP to the same high standards that you'd expect of cloud providers themselves. Doing so will minimise the security risk.
One way of gaining confidence in an MSP’s cloud offering is to treat them as a cloud provider themselves, and measure how well they operate, measured against the NCSC’s 14 cloud security principles. This approach:
Will consider practical mitigations you should look for (that can complement an assessment of your supply chain security)
Fits quite naturally if they’re providing a service that your organisation consumes (as you’re effectively treating it as SaaS)
A number of the NCSC’s cloud security principles are also relevant for all MSPs that have privileged access to your cloud services (including protective monitoring, secure service administration, and providing audit information for your customers). But it’s useful to acknowledge that we outsource all sorts of things to MSPs, not just cloud provision. You may already be assessing your MSP's wider services using a framework that covers ‘cloud security’; the important thing is that your chosen framework/standard/process gives you reason to have confidence in your supplier’s ability to defend your data and services against attack.
Outsourcing to an MSP can be a great way of making sure that security responsibilities in the cloud are met. Just be sure that you’re consciously holding MSP's to the same high security standards that you hold yourselves (and your cloud provider) to.
Struggling to know which is best for you Buy vs Build. Feel you should be getting more from your current suppliers. We are here to help, providing independent Tech advice, making sure you optimise all opportunities in which technology plays a part. If you want to know more visit https://therestistech.com/selection or contact me ([email protected]) today for a confidential and impartial discussion on how we can add value to your business.
, , , , , , , , , , , , , , , , , , , , , , , (ERP)ToolSelection, ,