Resellers vs Vendors vs MSSPs

I've just started working in a small IT team, and we're fine with running the day to day stuff; however, we're aware that we're lacking in cybersecurity.

My IT director has asked me to get some ideas on what we could be doing better and put together a rudimentary plan.

Do you guys go to resellers, or vendors or MSSPs for this sort of thing? If so, who do you recommend?

For context i'm quite new to this whole world …

aware cybersecurity director doing go to ideas it director mssps running team vendors working