DHS Cybersecurity Service Offering Reference Aids
DHS’s National Protection and Programs Directorate (NPPD) has developed a list of freely available reports and resources pertinent to managing the acquisition of cybersecurity services. It is not intended to be exhaustive but covers a wide range of cybersecurity services, including cloud service providers, cyber incident response, cloud computing, software assurance, and industrial control systems. While most of its recommendations and reports are vendor-agnostic, some identify specific service providers that have met certification criteria related to their service offerings. DHS does not endorse any particular service provider or offering.
https://www.us-cert.gov/sites/default/files/c3vp/cybersecurity_service_offerings_reference_aids.pdf