Security essentials
The everyday habits that prevent most ordinary incidents.
Most everyday security problems are not exotic. They are a missed update, a reused password, or a convincing email. The Managed plan builds those defences into daily operation instead of treating security as a one-time project.
Everyday protective habits
A short list of controls, kept consistent, does more than an occasional big initiative. On the Managed plan, these are in place and kept current.
Multi-factor sign-in, enforced
On the Managed plan, sign-in for email and business systems requires a second factor for every user. Both plans include setting it up.
Separate administrator accounts
Admin rights sit on separate accounts, kept out of everyday use, so one phished mailbox does not hand over the whole environment.
Suspicious messages, checked
Anyone can forward a message that looks wrong as an ordinary support request, in either plan, and get a clear answer without feeling foolish.
What the Managed plan keeps current
Ongoing security work is mostly quiet maintenance, not dramatic response. The Essential plan does not include these controls.
Endpoint protection
Managed antivirus and endpoint detection on each covered user’s computers, with the licence included.
Automated patching
Operating systems and common applications are patched automatically on covered computers, with alerts handled during business hours.
Encryption and backup
Device encryption is checked, the platform’s sign-in and email-protection settings are kept current, and Microsoft 365 or Google Workspace data is backed up with restores on request.
When a specialist takes over
Everyday protection is part of the Managed plan. Formal assessments, incident response and attestations are planned separately, with the right specialists.
Formal security assessments, quoted separately
Penetration testing, formal risk assessments and compliance audits are specialist engagements, quoted in writing separately from either plan.
Incident response, when it is needed
A confirmed compromise calls for a dedicated incident-response process, often with legal advisors involved.
Attestations from a qualified assessor
When a client, insurer or regulator requires a formal attestation, it comes from a qualified, accountable assessor.
Before the first call
A useful first conversation starts with simple facts.
Bring what you already know. Nothing on this list needs a password.
Bring this to the first call
Rough answers are fine.
- Current multi-factor coverage across accounts
- Who holds administrator rights today, and on which accounts
- Antivirus or endpoint protection in place today, if any
- Known devices or accounts outside routine management
- Any compliance obligation that needs a specialist review
Tell us your team size and what keeps interrupting the work.
Managed plan: $89 CAD per user, per month.Essential, at $59, covers help desk and administration only.
Tell us about your firm.
Your team size, the systems you rely on, and the first thing you want handled. A few sentences is plenty.