From Dev.to
Your MSP's remote tool is inside your compliance scope
The MSP is the one party in a CPCSC program that doesn't sign anything and still ends up in the assessment. It isn't a defense supplier. Its client is. But if it administers the systems where the clie...