The Library utilises numerous trusted partners for software development, IT maintenance, and other forms of consultancy, and whose staff have a variety of levels of access to our network or infrastructure dependent on their contract with us and the level of supervision or vetting that is undertaken.The outsourcing of IT work is always a risk, but at cultural/education institutions, it's even worse because they frequently have nobody who knows what good and bad look like. They're wholly reliant on the vendors. And so, so many MSPs have no idea how to deploy assets securely.