Cybersecurity for IT service providers