Skip to main content    

An official website of the United States government

Here’s how you know

**Official websites use .gov**              A **.gov** website belongs to an official government organization in the United States.            

**Secure .gov websites use HTTPS**              A **lock** (  LockA locked padlock) or **https://** means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.            

https://www.nist.gov/itl/smallbusinesscyber/guidance-topic/choosing-vendorservice-provider

            -  Topics  -  All Topics 
-  Advanced communications 
-  Artificial intelligence 
-  Bioscience 
-  Buildings and construction 
-  Chemistry 
-  Climate 
-  Cybersecurity 
-  Electronics 
-  Energy 
-  Environment 
-  Fire 
-  Forensic science 
-  Health 
-  Information technology 
-  Infrastructure 
-  Manufacturing 
-  Materials 
-  Mathematics and statistics 
-  Metrology 
-  Nanotechnology 
-  Neutron research 
-  Performance excellence 
-  Physics 
-  Public safety 
-  Resilience 
-  Standards 
-  Transportation 
 
            -  Publications 
            -  Labs & Major Programs  -  Laboratories    -  Communications Technology Laboratory 
  -  Engineering Laboratory 
  -  Information Technology Laboratory 
  -  Material Measurement Laboratory 
  -  Physical Measurement Laboratory 
-  User Facilities    -  NIST Center for Neutron Research 
  -  CNST NanoFab 
-  Research Test Beds 
-  Research Projects 
-  Tools & Instruments 
-  Major Programs    -  Baldrige Performance Excellence Program 
  -  CHIPS for America Initiative 
  -  Manufacturing Extension Partnership (MEP) 
  -  Office of Advanced Manufacturing 
  -  Special Programs Office 
  -  Technology Partnerships Office 
 
            -  Services & Resources  -  Standards and Measurements    -  Calibration Services 
  -  Laboratory Accreditation (NVLAP) 
  -  Quality System 
  -  Standard Reference Materials (SRMs) 
  -  Standards.gov 
  -  Time Services 
  -  Office of Weights and Measures 
-  Software 
-  Data    -  Chemistry WebBook 
  -  National Vulnerability Database 
  -  Physical Reference Data 
  -  Standard Reference Data (SRD) 
-  Storefront 
-  License & Patents 
-  Computer Security Resource Center (CSRC) 
-  NIST Research Library 
 
            -  News & Events  -  News 
-  Events 
-  Blogs 
-  Feature Stories 
-  Awards 
-  Video Gallery 
-  Image Gallery 
-  Media Contacts 
 
            -  About NIST  -  About Us    -  Leadership 
  -  Organization Structure 
  -  Budget & Planning 
-  Contact Us 
-  Visit 
-  Careers    -  Student programs 
-  Work with NIST 
-  History    -  NIST Digital Archives 
  -  NIST Museum 
  -  NIST and the Nobel 
-  Educational Resources 
 

Information Technology Laboratory

## Small Business Cybersecurity Corner

-  Cybersecurity Basics 
-  NIST Cybersecurity Framework 
-  Events 
-  Guidance by Sector  Expand or Collapse    -  Health Sector 
  -  Manufacturing Sector 
-  Guidance by Topic  Expand or Collapse    -  All Purpose Guides 
  -  Choosing a Vendor/Service Provider 
  -  Cloud Security 
  -  Cyber Insurance 
  -  Cybersecurity Risks 
  -  Government Contractor Requirements 
  -  Developing Secure Products 
  -  Employee Awareness 
  -  Multi-Factor Authentication 
  -  Phishing 
  -  Privacy 
  -  Protecting Against Scams 
  -  Ransomware 
  -  Responding to a Cyber Incident 
  -  Securing Data & Devices 
  -  Securing Network Connections 
  -  Telework 
-  Training  Expand or Collapse    -  Glossary 
-  Videos 
-  Get Engaged  Expand or Collapse    -  About 
-  Cybersecurity @ NIST 

## Connect with us

Twitter

# Choosing a Vendor/Service Provider

## Share

Facebook

Linkedin

Twitter

Email

*Tips for choosing hardware and software vendors and service providers*

**Enlisting Outside Support to Manage Cybersecurity Risk** – a five-part series on using outside firms to reduce your cybersecurity risk
                  - **Part 1- Should I Get Outside Support to Manage My Cybersecurity Risk?**  – guides the reader through the process of determining if they need outside cybersecurity help.  *Cyber Readiness Institute*
                  - **Part 2- An Introduction to Outside Firms that Offer IT and Cybersecurity Support**  - lists the types of support companies and a brief description of the services they offer  *Cyber Readiness Institute*
                  - Part 3- How to Select the Right Level of Outside Support  - provides instructions on how to select the right level of outside support  *Cyber Readiness Institute*
                  - Part 4- Understanding Your Cybersecurity Vendor Contract - provides insight into what you should look for in the support contract  *Cyber Readiness Institute*
                  - Part 5- Managing the Relationship with Your Outside Cybersecurity Provider -  provides guidance on how to successfully manage the relationship with the service provider  *Cyber Readiness Institute*

Guidance for MSPs and Small- and Mid-sized Businesses – provides mitigation and hardening guidance to help these organizations strengthen their defenses against cyberattacks*CISA (Cybersecurity & Infrastructure Security Agency)*

Vendor security – tips to make sure business vendors with access to your sensitive business information are securing their own computers and networks*Federal Trade Commission*

Hiring a Webhost – what to look for when hiring a webhost provider*Federal Trade Commission*

### HEADQUARTERS

301-975-2000

Webmaster | Contact Us | Our Other Offices

TwitterFacebookLinkedInInstagramYouTubeGiphyRSS FeedMailing List

Feedback

            -  Site Privacy 
            -  Accessibility 
            -  Privacy Program 
            -  Copyrights 
            -  Vulnerability Disclosure 
            -  No Fear Act Policy 
            -  FOIA 
            -  Environmental Policy 
            -  Scientific Integrity 
            -  Information Quality Standards 
            -  Commerce.gov 
            -  Science.gov 
            -  USA.gov 
            -  Vote.gov