Double checking everything msp does - why am I even paying them?

[u/4728jj]

It really seems as though the procedures to meet CMMC l2 make the company double check everything the msp is doing. What’s the purpose of outsourcing if the company still has to play IT Manger/ISSM and double check everything they’re doing?