Doing the best work, and nobody knowing
“We’re kind of a little bit fed up of doing all the best stuff in the background and nobody really knowing about it.”
Nobody checks an MSP’s claims
“There’s currently no formal regulation in the MSP industry. Almost anyone can call themselves an IT provider and claim they’re secure, or say they follow best practices, with really no independent oversight on those claims. Which is why independent continuous verification is so important. It helps clients separate genuine operational excellence from marketing claims.”
A certificate tells you what was true on the day
“...most of them are just snapshots in time. A certificate tells you what was true when it was issued, a tender response tells you what a supplier says they do, but neither necessarily tells you what’s happening today.”
“Assurix gives us a way to move beyond the statements and provide continuous verifiable proof.”
What the assessment found
“One of the most interesting things was, in the process, it wasn’t really about discovering major weaknesses. We already had strong governance, security, and operational practices in place. But the Assurix assessment gave us a new perspective on how the controls are owned, evidenced, monitored, and continually improved.”
“It reinforced that good businesses aren’t defined by never having issues. They’re defined by how quickly you can identify them, how transparently we deal with them, and how effectively we can improve.”
Nothing to fear
“If you genuinely believe you’re delivering a high-quality secure service, which a lot of us are, then independent verification shouldn’t be anything to fear. It should be something you’re proud of.”
How the Trustmark stays live
If a control fails, the MSP has 30 days to fix it, and the Trustmark is suspended publicly if it isn’t.
“Gaining Assurix isn’t the end goal. It’s really the start. The real value of Assurix isn’t achieving the standard once, it’s maintaining it every day through continual assurance and ongoing accountability.”
“Looking ahead, I’d like to see more MSPs embrace this level of transparency.”
