Infrastructure Providers Pack
The two parties that run your estate for you — the MSP with delegated admin, and the facility where the data physically sits. Same assessment discipline applied to both. 15% off buying separately.
What this actually gives you
- One holds your credentials, the other holds your cabinets, and a single vendor questionnaire flatters both.
- The MSP failure mode is reach — a compromise of their tooling is administrative access to everything you own. The facility failure mode is custody and geography — an EU-only contract broken by a US backup copy.
- Neither risk appears in the other’s assessment, and neither appears in a SOC 2.
Almost nothing in a modern estate is operated by the people who own it. Two providers matter more than the rest, and they fail in completely different ways.
MSP & MSSP Assessment Kit — the party with administrative reach: what they hold, every access path in, 40 controls they must evidence, 20 contract clauses against UK, DFS, HIPAA, DORA and NIS2 expectations, whether you could leave, and a 60-minute drill for the night they are breached.
Data Center Assessment Kit — the party with physical custody: where the data lives at rest, in transit and in backup, 29 controls merged across EN 50600, Uptime, SOC 2, ISO 27001, NIS2 and the EED, a residency and transfer decision engine, the AI and crypto tenancy overlay, and the hardware and firmware supply chain.
Why the pair. One holds your credentials, the other holds your cabinets, and a single vendor questionnaire flatters both. The MSP failure mode is reach — a compromise of their tooling is administrative access to everything you own. The facility failure mode is custody and geography — an EU-only contract broken by a US backup copy, or a GPU hall installed next to your cage with step loads the building was never designed for. Neither risk shows up in the other's assessment, and neither shows up in a SOC 2.
Both kits are written from the buyer's side and both feed richer rows back into a vendor register rather than replacing it.
What's in this bundle
MSP & MSSP Assessment Kit
Your MSP is your administrative plane. Assess what they hold, how they reach you, what they can evidence, what the contract says and whether you could leave — with a scenario that proves you can act the night they are breached.
Data Center Assessment Kit
Where your data physically lives — at rest, in transit and in backup — and what sits next to it. One data centre and colocation assessment across colo, cloud regions, hosted private, edge and air-gapped estates, merging EN 50600, SOC 2 and ISO 27001 with the residency regimes and the 2026 tenancy risks.
What's included
- Complete Library (.zip) — all formats included — fully editable
- Instant download after purchase
- Free updates — re-download when we release new versions
- Practitioner License: unlimited client use (vCISO / MSP)
More from the CISO Marketplace ecosystem
Choose your license:
- Secure checkout via Stripe
- All major cards accepted
- 30-day satisfaction guarantee