Support, not cost, is what separates one service provider from another, AppRiver’s Smith says. SMBs should be careful to vet potential VARs, just as they would vet potential service providers, experts say. SMB should set up methods to regularly test and monitor their security services to be sure they’re getting what they’re paying for. Most SMBs find a security service provider they like and stick with it for the long term, expert says. You should build your expectations about service levels into the contract — if it’s not written down, you can’t be sure you’ll get that.”]