Six things a small company needs from IT, delivered as one managed service on a per-user plan, with projects on a fixed quote. Each page lists what is included, what you receive and the questions clients ask before signing.
The help desk is staffed by engineers, not a call tree. Tickets arrive by email, portal or phone, get a person within the response times on the how it works page, and close with a note you can read. Every laptop and desktop is enrolled in device management, so patching, encryption, software deployment and offboarding happen from the console instead of a visit. Onsite visits in the five boroughs are included on Complete and booked by the half day on other plans.
Unlimited remote support
Device management
Patching of operating systems and third-party applications on a published window
User onboarding and offboarding within one business day
Security on the Secure and Complete plans is the full stack a small business is told to buy and rarely gets: endpoint detection and response on every device, managed detection on the Microsoft 365 tenant, email filtering with phishing and impersonation protection, multi-factor authentication enforced through conditional access, monthly vulnerability scanning and security awareness training with simulated phishing. Alerts go to a 24×7 security operations team, and the containment playbook signed at onboarding says what they may do without waking you.
Endpoint detection and response
Managed detection on endpoints and Microsoft 365 identities
Most of what goes wrong in a small company's security happens in the Microsoft 365 tenant: a forwarding rule, a legacy protocol left on, an admin account without a second factor. We set tenants up against the CIS Microsoft 365 benchmark, keep the configuration under change control, and review it quarterly. Migrations from Google Workspace, on-premises Exchange, Dropbox or another tenant are scoped in a call and quoted fixed price per mailbox and per terabyte.
Tenant hardening to the CIS Microsoft 365 Foundations benchmark
A backup that has never been restored is a hope. Servers are protected with an appliance that keeps a local copy and a cloud copy and can boot a failed server as a virtual machine within an hour. Microsoft 365 mailboxes, OneDrive, SharePoint and Teams are backed up daily, because Microsoft's retention is not a backup. Every quarter we restore real files, mailboxes and a server from each client's backup and send a signed report with the times.
Practices, advisors and firms in New York carry obligations their IT provider usually ignores until the questionnaire arrives. We run the HIPAA Security Risk Assessment your covered entity is required to have, build the written information security program the SHIELD Act expects, maintain the NYDFS Part 500 controls and filings for financial advisors, and take companies through SOC 2 readiness with an auditor we have worked with. Cyber insurance applications are completed from the same evidence the monthly report draws on, so the answers are true.
HIPAA Security Risk Assessment with the risk register
NY SHIELD Act written information security program
Office networks are specified for the business, installed on a schedule that does not stop the practice, and monitored (Auvik) so we know a switch failed before the front desk does. Office moves and build-outs are quoted fixed price with the landlord's and the cabling contractor's dates in the plan. For line-of-business applications that have outgrown a server in a closet, we host on AWS with backups, monitoring and a monthly bill you can read.
Business firewall with managed rules
Switching and Wi-Fi sized for the floor plan
Network monitoring and configuration backup for every managed site