Sources

Source publication dates are shown where established; undated product and job pages are observations at the cutoff. Vendor descriptions establish advertised scope, not independent performance.

• NIST SP 1300: Cybersecurity Framework 2.0 Small Business Quick-Start Guide (26 February 2024)
• CISA, NSA, FBI and international authorities: Advisory to Protect Managed Service Providers and Customers (2022)
• NIST SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management (3 April 2025)
• Microsoft Defender for Business — US plans and pricing (observed 20 October 2026)
• Expel: Microsoft MDR Security
• NetSPI: Proactive Security and Penetration Testing
• Bishop Fox: Offensive Security Services
• Truvantis: vCISO Services
• AICPA & CIMA: SOC 2
• CISA: Risk Considerations for Managed Service Provider Customers
• Cloud Security Podcast EP277: CISO as CFO, From Citi to Celery, It's All about the Cabbage (13 May 2026)
• Arctic Wolf: Managed Detection and Response
• HHS: Summary of the HIPAA Security Rule
• FTC: Safeguards Rule — What Your Business Needs to Know