The IT Law Wiki



A commercial service provider (CSP) is

an entity that supplies the system and services needed to provide the back-office infrastructure for a business. It includes internet, network and communications service providers.
a public or private company that transports information electronically in the wireline, wireless, Internet, cable, satellite, and managed services businesses. Any managed security service provider meeting the eligibility requirements may become a CSP.[1]

Critical infrastructure[]

Commercial service providers (CSPs) receive threat information from the Department of Homeland Security (DHS) and use it to offer specified services to their critical infrastructure customers in a secure environment in order to ensure the security of government-furnished information.

CSPs deliver services to eligible customers through commercial relationships. The Enhanced Cybersecurity Services (ECS) program is not involved in establishing the commercial relationships between CSPs and validated critical infrastructure entities.