It's not just about how you protect your customer's data, but also how anyone you do business with protects their data.
When picking vendors, make sure you're evaluating their security posture by reviewing things like:
Don't be the MSP with the reckless vendors.