MORE ADVANCED VETTING 1. Do you run criminal and other personal and professional integrity checks on employees before they are hired? 2. Within legal constraints of what is allowed, do you limit who may be hired based on criminal history? 3. Do you drug test employees for illicit drug use before hiring and/or randomly? 4. Do you verify references for all employees and vendors? 5. Do you require attestation of compliance with agreements and cyber hygiene? 6. Do you contact comparable references? TRAINING 1. Do you provide cyber security technical and social awareness training to your employees? a. How often? b. Are they tested? i. How? Questions To Ask Your MSP | 6
A CEO's Guide to Choosing an IT Service Provider Page 5 Page 7