Managed Service Providers
A Managed Service Provider (MSP) can operate the Analog Informatics Corporation (AIC) kits for its customers. The MSP runs one kit inside each customer boundary, keeps the customer relationship, and works from the same Assessment Binder the assessor reads. The kits run on the customer's infrastructure, in the cloud, in a secure enclave, and on air-gapped systems.
What an MSP gets
| Need | How the AIC kit helps |
|---|---|
| Repeatable delivery | The same Level 1, Level 2, or Level 3 kit structure at every customer |
| Fewer senior hours per assessment | The Assessment Binder holds the evidence the assessor reads |
| Continuous compliance | The kits receive constant feeds, generate alerts, mitigate issues, and monitor configuration compliance |
| Privileged access for technicians | Brokered sessions, time-bound elevation, and recorded sessions on the Level 3 kit |
| Workforce training | Training and attestation records for each customer's people |
| Air-gapped customers | The kits run where general network access is not allowed |
| Existing tools | Feeds for the MSP's SIEM, CMDB, trouble-ticket system, and compliance package |
Why MSPs build a practice on AIC
| Reason | Facts |
|---|---|
| Partner margin | Partner discounts on every new sale and every renewal, with a higher discount for registered opportunities. Program terms are shared with partners directly |
| Support | Unlimited partner support requests, with escalation to the engineers who build the product |
| Free training | Free training for the MSP's staff and its customers |
| One product to learn | Privileged Identity Management (PIM), Privileged Access Management (PAM), Privileged User Management (PUM), configuration compliance, training and attestation, and the Assessment Binder in one product with one console |
| The whole CMMC program | Tools for Level 1, Level 2, and Level 3, and for every stage from scoping to annual affirmation. See CMMC solutions by level, stage, and use case |
| Every customer environment | Secure enclave, in-place, hybrid, and air-gapped customers on the same kit |
| Recurring services | Monthly operation, rescans, POA&M closeout, training cycles, and the annual affirmation are services the MSP can deliver every year |
| Customer stays in control | The customer grants the MSP scoped, revocable administrative access inside its own boundary |
Services an MSP can deliver on the kit
| CMMC stage | MSP service | AIC tool |
|---|---|---|
| Scope | Inventory and scoping workshop | Discovery, system component inventory, scoped roster |
| Gap assessment | Gap report against the requirement set | Current State Compliance |
| Remediate | Credential, session, and elevation controls | PIM, PAM, PUM, configuration compliance |
| Document | System Security Plan and Plan of Action and Milestones (POA&M) | Assessment Binder, POA&M items, risk register |
| Train | Workforce training cycles | Training assignments and signed attestations |
| Assess | Assessment support | Read-only assessor access and Binder export |
| Monitor | Monthly operation and reporting | Continuous rescan, alerts, SIEM forwarding |
Platforms and integrations
Cloud platforms
All logos and trademarks are the property of their respective owners. Their use does not imply endorsement.
Planned marketplace support
Google Cloud, Amazon Web Services, Oracle Cloud, and Exostar marketplace listings are planned, based on customer demand. Customer installation on any cloud is available now.
All logos and trademarks are the property of their respective owners. Their use does not imply endorsement.
What stays with the customer
The customer keeps physical security, personnel screening, and its policies. The MSP can run the workflow and keep the record. The assessor decides the outcome.
How MSPs work with other partners
An MSP can work alongside the customer's reseller and implementation provider. An MSP can also be the implementation provider. See Service providers.