
8 Business Metrics MSPs Need to Manage | ScalePad
A free Cognition360 guide to the operational and financial metrics every MSP should monitor.
Resources
Curated video series, guides, and reports for teams turning client conversations into repeatable revenue and stronger outcomes.

A free Cognition360 guide to the operational and financial metrics every MSP should monitor.

Owners, technical leaders, client teams, and service teams all need different context from the same client environment. This guide shows how each role plans, proves value, and moves work forward.
How to start, package, price, and sell a CaaS practice: the team, the nine-service catalog, Good/Better/Best tiers, pricing anchors, and a 90-day launch plan.
A practical workflow guide for moving from client signal to reviewed account action inside Lifecycle Manager.
CIS Controls v8.1 for MSPs: the 18 controls and 153 safeguards, Implementation Groups 1–3, the client-zero playbook, and a ControlMap workflow built on Stacks.
CMMC Levels 1 and 2 for MSPs: contract clauses, the 110 NIST 800-171 controls, scoping and enclaves, the C3PAO journey, costs, and a ControlMap workflow.
HIPAA for MSPs: business associate duties, the Security, Privacy, and Breach Notification Rules, responsibility splits, and a step-by-step ControlMap workflow.
ISO/IEC 27001 for MSPs: the ISMS clauses 4–10, the 93 Annex A controls and the SoA, Stage 1 & 2, the 3-year certification cycle, and a ControlMap workflow.
NIST CSF 2.0 for MSPs: six functions, 106 outcomes, Tiers and Profiles, the client-zero playbook, cross-mapping, and a step-by-step ControlMap workflow.
PCI DSS for MSPs: the 12 requirements, scoping the CDE, choosing the right SAQ, merchant levels, the annual validation cycle, and a ControlMap workflow.
SOC 2 for MSPs: the report and Type I vs Type II, the Trust Services Criteria, scoping the five categories, the audit journey, and a ControlMap workflow.
FTC Safeguards for MSPs: who counts as a financial institution, the nine elements, the eight safeguards, testing lanes, the QI role, and a ControlMap workflow.