Vendors & DPAs

How MSPs Can Manage Vendor Risk

As a Managed Service Provider (MSP), managing vendor risks is a critical aspect of your job. Your clients rely on you to ensure that their IT systems are secure and running smoothly, which means you must carefully vet and manage the vendors that provide the software, hardware, and services that support those systems. Such vendor [ ]

Why MSPS Need Their Own Data Processing Agreements

Over the past ten years regulation of data privacy and security has proliferated at the international, federal and state levels. Several industry-based federal regulations have been developed such as HIPAA for healthcare and GLBA for financial services. Other geographically based regulations such as GDPR (EU) and CCPA (California) apply to the personal data of citizens [ ]

Managed Services Lessons Learned in 2022

2022 began very differently than it ended. The pandemic, global supply chain, cyber-attacks, cyber risk, the economy, MSP talent, and many other areas saw change (good and bad) during the year. This summary of the year 2022 in managed services looks at a variety of areas all related to the global managed services profession and [ ]

MSP Policy & Procedures

POLICY & PROCEDURES FOR MANAGED SERVICE PROVIDERS (MSP) With the tightening of data protection laws that followed the introduction of GDPR, enforcement actions have begun to be more widespread. Heavy penalties are handed out by the Data Protection Authorities. There have already been some big victims, including Marriott and British Airways, who were both handed [ ]

MSP Contract Negotiation Series: Data Processing

Data processing is an important element of any managed services agreement. The handling of data belonging to clients has never been more critical to the relationship between customer and MSP. Data processing is no longer just a service delivery issue, it is now a contractual one as well. Join the discussion as MSP Zone explores [ ]

Changing Legal Landscape for Managed Service Providers

It has been several years since GDPR went into effect and it has had an impact on MSPs and clients alike. Today, many more laws are being and have been enacted that aim to copy what GDPR has accomplished, in large part, to combat the rise in ransomware attacks. Highlights: Impact of GDPR on MSPs [ ]

When Security Vendors Get it Wrong

MSPs often outsource SOC, SIEM, and other security-related services to their vendors, including some of the larger MSP platform companies. But, what happens when those vendors miss something? Does the MSP have any liability to the client? What can the MSP do to protect themselves? Highlights: Do MSPs need security SLAs from their vendors? What [ ]

Negotiating Technology Contracts: On-premise vs. Cloud and Hosted Software

More and more businesses are considering accessing hosted software rather than purchasing on-premise software. They are also placing data in third-party public or private clouds instead of selecting on-premise software. This article will explain the key considerations and contractual provisions when deciding to utilize a hosted software cloud solution versus on-premise software solutions. KEY CONSIDERATIONS [ ]

Advice on Negotiating with Vendors

MSPs are going through interesting times, particularly when it comes to their relationship with vendors. If you are an MSP (new or old) and need some advice on how to negotiate with your vendors, you’ve come to the right place.

Is it Smart to Private Label Your Services as an MSP?

Private labeling (or white labeling) solutions as an MSP is not a new concept. It has been in practice for many years. And yet, with all the changes in privacy and security disclosures in recent years, it begs the question of whether white labeling is still something MSPs ought to do. Program Highlights: Is white [ ]

Are Managed Services Clients on a Collision Course with Vendors?

Recent cyberattacks involving vendor technologies could be creating more risk for managed services customers. Are these attacks setting clients on a collision course with technology vendors (not MSPs)? We will discuss on today’s MSP Zone. MSPs need to disclaim liability (in their customer contracts) for downstream vendors All systems are vulnerable. MSPs can’t indemnify them [ ]

Vendor Supply Chain Data Breaches, What Should You Do?

What obligations do MSPs have when they learn of a data breach within one of their supply chain vendors? Does such a breach automatically mean the MSP needs to issue a notification? Perhaps not. This episode will discuss this topic and provide MSPs with some valuable analysis and helpful insights. MSP Zone Guest: Rob Scott, [ ]

Securing the MSP Supply Chain

The supply chain in managed services involves numerous technology relationships with external parties. This is a normal practice. There are, however, some easy and necessary steps every MSP ought to take when reviewing their supply chain partners and making decisions that ultimately affect risk and profitability. MSP Zone Guest: Rob Scott, Scott & Scott LLP

Are MSPs Responsible for their Vendors?

MSPs are responsible for their own actions, but should they be responsible for the external service providers (i.e., vendors) they bring to their customers? This episode discusses this complicated question and makes the complex easy to understand. Episode highlights: Customers must be held liable for actions they take impacting their data privacy and security. Co-managed [ ]

GDPR, Competitive Edge for MSPs

GDPR: What Every MSP Needs to Know

Software as a Service & Cloud Contracts: Avoiding the Risks

Benefits of Negotiating a Source Code Escrow Agreement in a Software Vendor Contract

Many businesses have software licenses that are tailored to the business’ needs, and are for business operations on a day-to-day basis. But what happens if the software provider goes out of business or discontinues support for the software? In short, the business may not have meaningful access to necessary software after it is no longer [ ]

Privacy & Security Issues in Cloud Contracts

The Best Defense is a Good Offense: How the Certification Revisions will Help Reduce Licensing Liability for MSPs