Microsoft 365
4 areas covered
- SharePoint and OneDrive scoped to project teams
- Consultant and trade access reviewed at closeout
- MFA, Conditional Access, and administrator controls
- Managed endpoint protection on supported devices
Protect project files without slowing collaboration
Architecture practices share files with staff, consultants, trades, and clients while deadlines stay fixed.
Security Stack
Project access can outlast the project itself
Long project histories and frequent external collaboration create access that is easy to grant and easy to forget. The security work starts by separating cloud-tenant controls from the systems that hold the actual models and drawing sets.
Projects
Scope access to the project team
Where project folders live in Microsoft 365 or Google Workspace, access is limited to the assigned team. Permissions are reviewed when roles change or the project closes.
Sharing
Put limits on external links
Consultant and trade access uses named guests or links with defined expiry where the platform supports it. External access is reviewed instead of allowed to accumulate across years of projects.
Devices
Protect workstations and site laptops
Supported devices in scope receive managed endpoint protection, encryption, and security updates. Alerts are reviewed by a person who can investigate and coordinate the next action.
Sign-ins
Watch for account takeover
Multi-factor authentication, administrator controls, and sign-in monitoring reduce the reach of stolen credentials. Suspicious sessions and inbox-rule changes follow the agreed response process.
Email
Reduce invoice and payment fraud
Email controls filter phishing and impersonation attempts aimed at project accounting. Independent verification of a changed payment instruction remains a practice procedure.
Recovery
Match backup to where the files live
Microsoft 365 or Google Workspace data is backed up independently and tested for recovery. CAD, BIM, rendering files, NAS storage, local servers, and specialist applications need a separate recovery scope.
Business Value
What the program does for your practice.
The practice gets clearer project access, fewer forgotten external links, protected devices, and an honest recovery plan built around where the files actually live.
01
Control project access
- Project folders limited to assigned staff and collaborators
- External links and guest accounts reviewed at project closeout
02
Protect daily delivery
- Managed protection on supported studio and site devices
- Planned security work coordinated around known deadlines
03
Prepare for recovery
- Independent backup for data held in the cloud tenant
- Separate recovery decisions for models, servers, and local storage
What stays yours
The practice decides how long project records are kept and which contractual or professional requirements apply. Teclara operates the security controls in scope and documents what the backup covers. CAD, BIM, rendering files, workstations, NAS devices, servers, and project applications are included only when named explicitly.
One managed program that covers the controls below.
Managed Security & Compliance covers the full stack: monitoring, endpoint protection, email security, backup, patching, and platform administration on Microsoft 365 or Google Workspace.
- Human-led monitoring
- A 24/7 security team detects and responds to threats, not just an automated alert.
- Endpoint protection
- Managed detection and response on supported staff devices placed in scope.
- Email and fraud protection
- Controls for phishing, impersonation, and invoice fraud, with suspicious activity reviewed.
- Cloud backup and recovery
- Microsoft 365 and Google Workspace backed up daily, with tested restores.
- Login monitoring
- Cloud sign-ins watched for account takeover, with response following an agreed process.
- Patching and vulnerability management
- Systems patched on a defined schedule, with known weaknesses prioritized by risk.
- Security awareness training
- Ongoing training and simulated phishing to keep the team sharp.
- Tenant configuration
- Microsoft 365 or Google Workspace settings reviewed and updated against the security baseline.
Platform Expertise
Secure configuration for Microsoft 365 and Google Workspace.
We configure the identity, sharing, email, and retention controls your practice relies on, then keep them under review.
Google Workspace
4 areas covered
- Shared drives scoped to project teams
- External links and guest access reviewed at closeout
- Gmail phishing and impersonation protection
- Google Vault aligned with retention policy where licensed
Included
Configuration updates are part of the service. When our security baseline changes, your environment is updated without a separate project fee.
Frequently asked questions.
How do you protect project files and design information?
We protect the accounts, sharing, email, and supported devices around the work. Microsoft 365 or Google Workspace data can also be backed up independently. CAD, BIM, rendering files, NAS devices, workstations, servers, and specialist project systems need to be identified separately so the practice knows which protection and recovery controls apply.
Can you take over from our current provider?
Yes. We document the current environment, confirm responsibilities, and coordinate the security transition around the project calendar. If you want to delegate day-to-day IT as well, Managed IT includes the security program and adds user support, device administration, onboarding, and platform management.
What happens if a security alert fires outside business hours?
The security team reviews alerts and follows the agreed response and escalation process around the clock. The action available depends on the system, access, and authority placed in scope, so those boundaries are documented before monitoring begins.
Can you help with a cyber insurance application or renewal?
Yes. We map the controls in scope to the questions on the insurer form and provide current evidence for covered controls. Requirements vary by insurer and policy, so the work supports the application but does not guarantee approval or coverage.
Do you support both Windows and Mac devices?
Yes, for supported operating-system versions and compatible security tooling. Device coverage is confirmed during scoping because specialist workstations, older hardware, and application dependencies can affect what can be enrolled and how updates are scheduled.
Client Feedback
What a client says about working with us.
“Teclara materially improved both our operational responsiveness and our security posture.”
E.C.
Senior Leadership, GTA Consulting Firm
Led by Wadhah Hussain, Teclara's founder
20+ years enterprise IT · Big Four alumnus · Microsoft & Google Cloud specialist
Review who can still reach your project folders
We review sign-ins, administrator access, mail flow, device coverage, external sharing, and cloud backup in your Microsoft 365 or Google Workspace environment. You receive written findings, including stale accounts and links that outlived a project.