How we work — the operating standards.
These pages are written for your IT staff — or for the provider who is supposed to vet us. Per discipline: what we do, with which parameters, with what, what you receive as evidence and what we deliberately do not do. Whatever is agreed per client is marked as such.
Four disciplines, one pattern: procedure, parameters, evidence.
Every alert becomes a ticket. Service hours Mon–Fri 08–18, on-call by agreement.
Evidence: Availability and alerts in the monthly report
MFA for everyone, separate admin accounts, Conditional Access, access reviews.
Evidence: Access review
What the monthly report contains.
One document, monthly, per client. It is the summary of all standards — and what you show insurers, auditors or management.
- Patch compliance per device, missing updates, exceptions with end date
- Backup status of all jobs and the month's restore log
- Availability: outages with duration, cause, action
- Tickets: count, categories, response times, open items
- EDR status per device and handled incidents
- Access review (at the agreed cadence) and offboarding evidence
- Open risks with recommendation and effort — prioritised, not as a list
What we work with — and what is replaceable.
Every tool with its role, data location and the answer to what happens if you replace us. No lock-in is a promise that must be verifiable.
Request a technical call
Your IT has questions not answered here? A call with the founder, technical, no sales in between.