Stating the need
Which risks you are closing and where the requirement comes from: NIS2, a customer contract, the questionnaire your insurer sends before writing cyber cover, or your own risk assessment.
The most common failure in security does not happen at the purchase, it happens a year later. The licences are paid, the console opens, and the tool is still sitting in audit mode because nobody dared switch blocking on. Or the reverse: blocking goes live on a Friday evening and on Monday the finance team cannot start its payroll software. We run the deployment through to real protection and avoid both of those endings.
The order surprises people: we first write down what has to be protected and to what level, and only then start talking about products and price lists.
Which risks you are closing and where the requirement comes from: NIS2, a customer contract, the questionnaire your insurer sends before writing cyber cover, or your own risk assessment.
Plenty of companies already pay for Microsoft 365 plans that include endpoint protection, device management or conditional access, and never switch any of it on. The scope varies by plan, so we check before anything new is bought.
When something really does need buying, we put two or three candidates side by side against your size, your team's skills and the cost over three years rather than the first-year price.
The tool runs on a sample of machines and users drawn from different departments, which is how conflicts with line-of-business software, printer drivers and ageing engineering applications come to light.
Policies, links to the systems you already run, and distribution through Intune, group policy or the vendor console. Nobody has to walk from desk to desk.
Your IT contact learns to read the alerts and handle exceptions. If you would rather not, we keep the fine tuning under a managed service agreement.
Every stage has a written exit test. We do not move to the next one while the previous one is still wobbling.
We record what the tool has to achieve and how we will know it has: share of the estate under management, time to deal with an alert, number of non-compliant machines.
A pilot on five to ten machines. A conflict is far cheaper to find on ten devices than on two hundred.
Department by department, with a rollback prepared and a gradual move from watching to blocking.
Configuration documentation, an online handover session and an agreed alert-handling routine, including who answers outside working hours.
The most expensive tool is the one that was never switched on. We regularly meet an EDR with not a single blocking rule, or conditional access policies covering two test accounts created during the sales demo. Before buying anything new, it is worth checking what your current subscriptions already know how to do.
It depends on how many accounts and machines you have, but both can be deployed remotely and the plan is built around your renewal date. We start with privileged accounts and external access, then widen. You also get a written description of the configuration, which is useful when filling in the broker's questionnaire.
Yes. A machine enrols in Intune without a classic domain, including one that lives permanently at a home office. Once enrolled it picks up the same policies as the rest of the estate, and its compliance state shows in the same console.
Your company's, and the administrator access to the console is yours. If you move on, you hand the rights and the documentation to the next provider without buying anything twice or losing the alert history.
Everything travels through Intune, group policy or the vendor console. If a physical action is unavoidable, such as plugging in an appliance, your own staff or your usual installer does it from our written instructions while we configure the rest remotely.
Tell us which tools you are weighing up or already own, and where the requirement came from. We will propose a pilot and a roll-out plan.
Message received
An answer follows inside one working day. Report an outage that is stopping people working and it moves ahead of everything else.
Nothing here under that name. Check the spelling, or simply choose the nearest large city instead. Since every engagement runs remotely, whichever you pick changes nothing about what we do for you.