Managed service providers and value-added resellers are the common types of information security suppliers for SMBs. Whom will they choose?