Help-desk verification by vibe
Name and title is not verification. An attacker with LinkedIn clears that bar.
Loading page…

For managed service providers
Cyber Ready Clinic assesses nonprofits and small organizations for free, and then has to tell them who can actually defend them. Ready5 Validation is how an MSP proves it has the tooling, the staffing and the process to deliver every required control. Not a directory listing: an assessment, a findings report, and a signed attestation.

File · CRC/007 · Why validate
Why validate
Cyber Ready Clinic is a 501(c)(3) that assesses nonprofits and tax-exempt organizations at low to no cost, finding risks and capability gaps that may lead to a serious cyber incident. Most of those gaps close with Cyber Ready Clinic recommending an MSP to the nonprofit. This program is currently free. Only 20% of the MSPs we’ve assessed have achieved the badge.
44
Required capabilities that your MSP must be able to implement for any referred customer.
5
Capability domains: endpoint, identity, email, edge, response
Annual
Re-evaluation or re-attestation may be required.
Ready5 Validated MSPs




File · CRC/007 · Controls
What you will show us
File · CRC/007 · Process
How validation works
Tell us how you deliver today. About 45 minutes of your team's time to get started.
Request an AssessmentA guided walkthrough of all 44 controls with the people who run your stack.
You see exactly where you stand, control by control.
Fix what is open, with the findings report as the checklist.
Commit in writing, and receive your Ready5 Validated MSP badge.
File · CRC/007 · Common gaps
Before you start
Rarely the tooling. Almost always policy, process or paperwork. These are patterns from real assessments, not any one provider.
Name and title is not verification. An attacker with LinkedIn clears that bar.
The most valuable identity in Active Directory, reachable by phishing.
Strong MDR for most clients, and a segment with none at all.
The control asks for a document, produced on request.
File · CRC/007 · The badge
The badge
The MSP Ready5 Badge shows you can deliver on technologies, processes, and procedures that will ensure our clients can meet the Ready5. It does not validate your own internal security program, as we do not currently assess how your MSP manages your own internal IT. This badge is only used as a validation of your cybersecurity offerings that come along with your IT delivery.
Click to learn about our credentials
File · CRC/007 · Start here
Start here
About 45 minutes of your team’s time.