Services

Every front One standard

Our services, grouped by the kind of help you need.

Choose a service group

IT Operations

Day-to-day support and upkeep for your users, endpoints, networks and cloud infrastructures.

  • Managed IT SupportAn engineer-level help desk for everyday problems.
  • Cloud Infrastructure and MigrationMoving your systems to the cloud, including setups that mix cloud and office systems, planned step by step, with access checked and every change documented.
  • Server and Infrastructure AdministrationYour servers and the systems holding data assets, monitored and kept protected.
  • Remote Monitoring and ManagementAutomatic health checks on every device that flag problems early.
  • Network Administration and MonitoringWe watch and manage your network and work with your internet provider when service drops.
  • On-Site and Field ServicesScheduled visits to your office for hands-on work, like setting up equipment or fixing what cannot be fixed remotely.

Security Operations

Keeping threats out of your systems and your data recoverable.

  • Security-First Endpoint ManagementProtection, threat detection and updates on every computer.
  • Secure Configuration and Hardening ManagementComputers, servers, firewalls and cloud infrastructures set to recognized secure settings, and checked so they stay that way.
  • Microsoft 365 Security ManagementSafer sign-ins, protected email and a locked-down Microsoft 365.
  • Email Security and Anti-Phishing ManagementFewer fake and dangerous emails reach your users, and we check the suspicious ones they report.
  • Microsoft 365 Backup and SaaS Data ProtectionBackups of your email, OneDrive, SharePoint and Teams.
  • Vulnerability ManagementRegular vulnerability scans for weak spots, with fixes tracked until they are closed.
  • Penetration Testing and Security ValidationApproved break-in tests, run as a project with our testing partner, then a retest once the gaps are fixed.
  • Firewall and Network Security ManagementYour firewall, VPN and network rules managed so only the right traffic gets in.
  • Backup and Ransomware RecoveryImmutable backups with scheduled restore tests.
  • Managed Logging and SIEM MonitoringAlerts from your systems in one place, reviewed by our security team.
  • External Attack Surface and Domain Security ManagementA regular check of what attackers can see of you online, from open services to email settings.
  • DNS and Web Protection ManagementKnown dangerous websites blocked before they load, with exceptions for the sites your business needs.
  • Zero Trust and Secure Access ArchitectureA project to redesign how people and devices reach your systems, so each gets only the access it needs.
  • Advanced SOC and MDR MonitoringRound-the-clock monitoring for your computers and systems, through our security operations.
  • Threat Intelligence and Security AdvisoryEarly warning about new threats that affect the tools you use.

Governance, Risk & Compliance

Policies, plans, reviews and records that show you are in control of your security.

  • Business Continuity PlanningA plan for what comes back first when something goes down.
  • Data Protection and Information GovernanceKnow where your sensitive data lives, who can open it, how long you keep it and how it is destroyed.
  • Compliance Evidence ManagementEvery month or quarter, we keep your policies, logs and reports organized in an audit-ready package.
  • Security Policy and Exception ManagementWritten security policies kept current, with exceptions on record.
  • Security Awareness and Phishing ReadinessShort training and practice phishing emails so your team can spot scams.
  • Incident Response ReadinessA response plan and practice drills, so everyone knows their role.
  • Incident Response SupportHands-on help to contain an incident and coordinate the recovery.
  • Vendor Remote Access GovernanceOutside vendors get their own limited remote access with a second sign-in step, shut off and recorded when the work is done.
  • Third Party Risk ManagementWe list the outside companies you rely on, rank them by risk and review their security.
  • Cyber Risk AssessmentA review of your security risks and a ranked plan of what to fix first.
  • Cyber Insurance and Security Questionnaire SupportWhen an insurer or a client sends a security questionnaire, we help you answer it accurately, with the evidence to back your answers.
  • Logging Governance and Retention ManagementClear rules for which system records you keep and for how long, with proof they were reviewed.
  • Change Management and Maintenance GovernanceChanges to your systems are planned and approved before they happen, then checked afterward.
  • Executive Security Reporting and ReviewA monthly report and a quarterly review of where you stand.
  • Board and Executive Cyber BriefingPlain-language briefings on cyber risk for your owners, board or leadership team.

Advisory & Virtual Leadership

Senior guidance for the big security and technology decisions.

  • Virtual CISO (vCISO) ServicesA named security leader on a monthly retainer who guides your security strategy and briefs your executives.
  • M&A IT and Security Due DiligenceFor any newly acquired assets, we review their IT and security so you know what you are taking on.
  • Technology Assessment and Modernization ReviewA review of the technology you run today and a plan for what to upgrade, replace or keep.

Project & Professional Services

One-time work with a clear scope and a clear finish.

  • Security Baseline ImplementationA starter project that puts the basics in place: device protection, secure settings, logging, access controls and backups.
  • New Site and Office Technology BuildoutThe technology for a new office: network, Wi-Fi, firewall, computers and security settings, set up and documented.
  • Infrastructure Refresh and ModernizationAging servers, storage and network equipment replaced with as little disruption as possible.
  • Active Directory and Identity ModernizationOld user accounts removed and admin rights tightened, in your office network and in Microsoft 365.
  • Backup and Recovery Architecture DesignYour backups redesigned around what you need back first, including copies attackers cannot change.
  • Network Segmentation and Firewall DesignYour network split into separate zones with strict rules between them, so trouble in one zone has a harder time reaching the rest.
  • Microsoft 365 Tenant Migration and HardeningA move into Microsoft 365, or from one Microsoft 365 setup to another, with security settings applied from the start.
  • Compliance Package DevelopmentA one-time project that builds your policies, evidence and a map of how you meet each requirement, organized for an audit.

Compliance Programs

Programs aligned with recognized standards, explained on our Compliance page.

How our compliance programs work
  • CIS Controls v8.1 Compliance Program
  • NIST Cybersecurity Framework Compliance Program
  • NERC CIP IT-Scoped Governance Program
  • HIPAA Security Rule Compliance Program
  • FERPA and CIPA Compliance Program
  • FTC Safeguards Rule Compliance Program
  • Law Firm Confidentiality Program
  • Data Breach Readiness Program
  • Cyber Insurance Readiness Program

Next step

Find out where you stand

Tell us how we can best support you.