To help mitigate cybersecurity risks to managed service provider customers, the Cybersecurity and Infrastructure Security Agency (CISA) released a new CISA Insights, providing a framework that government and private sector organizations outsourcing some level of IT support to MSPs can use to better mitigate against third-party risk.
 

https://www.securitymagazine.com/articles/96020-risk-considerations-for-managed-service-provider-customers