Cyber Risk Guidance For Customers And Providers Of Managed IT Services

Cybersecurity is a fundamental issue for Canadian organizations of all kinds and sizes, including organizations that use information technology services managed by independent service providers. The Canadian Centre for Cyber Security has issued guidance to help organizations manage cyber risks when procuring and using managed information technology services.

Managed IT services and cyber risks

Many organizations engage specialist service providers – known as managed service providers (MSPs) – to manage some or all of the organization's information technology (IT) infrastructure and services (including infrastructure and services provided by cloud service providers and other third parties). The outsourcing of IT management services can provide significant benefits, but it can also present potentially significant business and legal compliance risks.