Common projects

• Essential Eight assessment

  Assess the client against the ASD Essential Eight at Maturity Levels 1, 2 and 3. The report gives you the answers for cyber-insurance questionnaires.

  Maturity report and prioritised roadmap

• Essential Eight uplift to ML1, ML2 or ML3

  Implement the missing controls to the target maturity level, including application control, patching, MFA and backups.

  Controls in place, with evidence

• SMB1001 certification readiness

  Implement the technical controls and policies needed for SMB1001 at any tier from Bronze to Diamond. Certification is issued separately by CyberCert.

  Controls and policies in place for certification

• Microsoft 365 Business Premium security baseline

  Configure the security features included in the client’s licence: Conditional Access, MFA, Defender for Business and Intune compliance policies, plus SPF, DKIM and DMARC with a plan to reach enforcement.

  Configured tenant and as-built documentation

• New client takeover

  Take over a client from another provider: discovery, documentation, credential rotation and migration to your standard tools.

  Documented environment and rotated credentials

• File and storage migration

  Move files between file servers, SharePoint, OneDrive, Dropbox, Google Drive and Egnyte, with a planned structure and permissions.

  Migrated files and a permissions map

• Microsoft 365 and Google Workspace migration

  Merge or split Microsoft 365 tenants, or move between Microsoft 365 and Google Workspace, including mail and files.

  Mail and files moved; cutover runbook

• Entra ID and Intune device management

  Set up device management with Entra ID and Intune, including moving devices off on-premises Active Directory and group policy, with user data carried across.

  Devices Entra-joined and enrolled, with an Intune baseline and Autopilot profiles

• Copilot readiness: SharePoint permissions clean-up

  Review and fix SharePoint and OneDrive sharing, remove stale guest access and apply sensitivity labels before Copilot is enabled.

  Sharing report, fixes and sensitivity labels

• Windows Server upgrade and migration

  Upgrade Windows Servers to a supported version, or move roles and applications to a new server and decommission the old one.

  Upgraded servers and a decommission record

• Cloud migration

  Move servers and workloads between on-premises, Azure, AWS and Google Cloud.

  Migrated workloads and as-built documentation

• Hypervisor migration

  Move virtual machines between hypervisors such as VMware and Hyper-V.

  Migrated virtual machines and as-built documentation

• Backup and recovery implementation

  Implement backup for servers, endpoints and Microsoft 365, and complete a documented test restore.

  Tested restore and a recovery runbook

• Network health check and documentation

  Review the configuration, firmware and security of an existing network, and document it properly.

  Diagrams, IP and VLAN plan, and findings report

• Firewall audit and clean-up

  Review rules, administrative access, firmware and logging on an existing firewall, and tidy it up without replacing hardware.

  Cleaned-up rule base and findings report

• Firewall replacement and migration

  Replace end-of-life firewalls, including between vendors. The rule base is reviewed and rebuilt on the new device.

  Rebuilt rule base and cutover plan

• Router and switch replacement and migration

  Replace or migrate routers and switches, including between vendors, with the configuration reviewed and rebuilt.

  Configured equipment and as-built documentation

• Network setup for new offices and branches

  Configure the firewall, routing, switching and site-to-site VPN for a new office, branch or remote site.

  Configured network and as-built documentation

• SD-WAN

  Set up SD-WAN across offices and branches, with link steering, failover and central policy.

  SD-WAN in place and as-built documentation

• Remote access VPN and zero-trust access

  Set up VPN with MFA or zero-trust network access, so staff reach only the systems they need.

  Remote access in place and documented

• Cloud connectivity

  Connect offices to Azure, AWS or Google Cloud with site-to-site VPN, routing and DNS configured.

  Working connection and as-built documentation

• Network monitoring setup

  Configure SNMP and alerts from network equipment into your RMM or monitoring tool, with syslog where it supports it.

  Devices monitored, with alerts in your tool

Vendors we work with: Fortinet, Palo Alto Networks, Cisco, Meraki, SonicWall, WatchGuard, Sophos, Check Point, Juniper and Huawei.

• PSA implementation and migration

  Set up a PSA, or move between platforms such as HaloPSA, ConnectWise and Autotask, with contracts and billing checked before cutover.

  Configured workflows and migrated data

• RMM and documentation platform migration

  Move to a new RMM or documentation platform, such as between IT Glue and Hudu, with scripts, policies and records carried across.

  Agents, policies and records moved

• Application rollout and setup

  Deploy and configure an application for a client or across your client base, such as ThreatLocker.

  Application deployed, configured and handed over

• IT service desk support

  Extra people on your service desk, working in your PSA under your brand, as part of your team or when the queue gets ahead of you.

  Tickets worked in your PSA

• Any other IT project

  Send us the brief. If it’s a good fit, we scope it and quote a fixed price like every other project.

  A fixed quote for the agreed scope