service 02 of 06
Security that assumes someone will click.
Someone on your team will open the wrong attachment one day. That is normal. The job is making sure one click costs you an afternoon, not the business.
Three layers, in plain words
No scare stories. Small offices get hit because they are easy, not because they are interesting. These three things make you hard.
MFA on everything
A stolen password alone stops working. We turn it on for email, the bank, payroll and remote access, then help each person set it up on their phone.
Endpoint detection
Software on each computer that watches behaviour, not just a list of known viruses. If a laptop starts encrypting files at 2am, it gets cut off the network and we get paged.
Phishing drills
Once a month, a fake but realistic email lands in inboxes. Whoever clicks gets a two minute lesson, not a scolding. Click rates tend to fall within a quarter or two.
The 12 control checklist
This is the baseline every client office gets to within 90 days. It also happens to cover most of what cyber insurance forms ask about, which saves a painful afternoon each renewal.
- MFA on email, remote access and finance apps
- Endpoint detection on every computer
- Updates applied within 14 days, critical ones within 72 hours
- Admin rights removed from daily accounts
- Email filtering for spoofed and lookalike senders
- Backups kept offsite and tested each quarter
- Old staff accounts shut off the day someone leaves
- A password manager for the whole team
- Encrypted laptop drives
- Guest Wi-Fi kept apart from the office network
- Monthly phishing drills with short lessons
- A written one page plan for what happens if you get hit
What it costs
Security runs $40 to $80 per user a month on top of Essentials or Managed. The low end is MFA, filtering and drills. The high end adds endpoint detection watched around the clock. It comes built into Managed plus Security at $175 per user, which is the same as Managed plus the low end add on, with endpoint detection thrown in.
Pair it with tested backups and managed IT and you have the whole picture.
- Call (408) 555-0134, any hour. Say the word ransomware and you skip the queue.
- We isolate the affected machines remotely, often within minutes.
- We restore from the last clean backup and help you talk to your insurer.