Your MSP's remote tool is inside your compliance scope

If an MSP administers systems holding Specified Information, its access and tooling are in your CPCSC scope. Jump hosts, session recording, and review.