the MSP's employees should sign a non-disclosure agreement as part of the agreement with the Managed IT Service Provider. It's also important to know how to communicate with the MSP through the relevant channels. If a resource isn't operating as expected, the company should know how to report it, how to resolve complaints, and who will be held responsible. https://www.extnoc.com/learn/c....omputer-security/adr