Cybersecurity for telecom providers.
Protection for staff accounts, email and computers on Microsoft 365 or Google Workspace, with people reviewing alerts around the clock.
Rather not book now? Leave your email and we'll get in touch.
We reply within 24 hours. Privacy policy
Send a message or email hello@teclara.tech
Staff and partner access
Support roles often span several tools and many customer records. Staff accounts and devices in Microsoft 365 or Google Workspace are covered, and specialist systems are handled separately.
New support staff
A new support team member starts
New support staff need access to the customer records their role requires. Named accounts with role-based permissions make that access easy to review and remove when duties change.
Partners and resellers
Partners need access to shared work
Channel partners and contractors often get shared folders or guest accounts. Regular reviews identify guest accounts that are no longer needed.
Account changes
A caller asks to change a customer account
Social engineering aimed at support staff is how SIM-swap and porting fraud often starts. Training helps staff spot these calls, and the provider’s own process still verifies every customer request.
After an incident
Account activity records
If an account is compromised, sign-in, mailbox and file-access records help investigators work out what happened. Which records are kept, and for how long, is set for each managed system.
Administrative access and customer information
Administrator roles, where customer information lives and which systems are managed are all mapped, so it is clear what is covered and who looks after it.
Identity
Cloud administrator protection
Administrator account protection combines multi-factor authentication, restricted permissions and monitoring for unusual sign-ins.
Customers
Customer records stay with the people who need them
Access reviews cover customer files, support conversations and shared documents in Microsoft 365 or Google Workspace.
Support
Access changes and offboarding
Staff, contractors and partners use individual accounts where possible. When someone leaves, the account is disabled, every session is signed out and shared access is removed from managed systems.
Devices
Staff device protection
Supported computers covered by the service get managed endpoint protection, encryption and security updates. The security team investigates alerts and escalates them as needed.
Email
Account and domain impersonation protection
Email filtering, sign-in controls and domain authentication help protect customer communications and internal requests. Changes to sensitive customer or payment details still need an independent check.
Recovery
Test recovery for cloud data
Microsoft 365 or Google Workspace is backed up every day to a separate location, and restores are tested.
Records for privacy reviews
Telecom providers under federal jurisdiction have PIPEDA duties for customer and employee information, including breach records. Records of the security work support those wider duties.
- Office of the Privacy Commissioner
- Can you produce your record of every breach of security safeguards from the last 24 months?
- Alert, investigation and response records for the managed systems support the breach records PIPEDA requires.
- Business customers
- Who at your company can see our account information, and how is that access controlled?
- The access model for customer folders and shared mailboxes, MFA coverage, and offboarding records for staff and partners.
- Cyber insurer, at renewal
- Is MFA enforced for administrators and support staff? Are backups tested?
- MFA and administrator role reports, device coverage, and the backup scope with the last restore test.
Security for business systems
Protection for Microsoft 365 and Google Workspace, set up around how your provider shares information and who needs access to it.
On Microsoft 365
- MFA, Conditional Access, and administrator role review
- SharePoint, OneDrive, and support mailbox access controls
- Managed endpoint protection on supported staff computers
- Sign-in and sharing records retained for review
On Google Workspace
- MFA and administrator access controls
- Gmail phishing and impersonation protection
- Shared-drive and external-sharing reviews
- Admin and sign-in records retained for review
Settings are kept up to date as part of the service, and upgrades to the tools and monitoring you already have come at no extra cost.
Included security services
- Staff identities, email, files, and sharing in Microsoft 365 or Google Workspace.
- Supported staff computers, cloud backup, monitoring and written control records.
Available separately
- Billing, ticketing, subscriber, and provisioning platforms, including their administrator access and recovery.
- Carrier core, routing, switching, voice, radio, and field infrastructure.
Frequently asked questions.
Does managed security include carrier networks?
No. Managed Security & Compliance covers Microsoft 365 or Google Workspace, supported staff computers, email and cloud backup. Routing, switching, voice, radio and other carrier infrastructure need their own assessment and owner, and the first review marks where those boundaries are.
What about billing and provisioning systems?
The first review identifies who administers each system and how staff sign in. Changes, monitoring, backup and response inside a billing or provisioning platform are covered only if access, technical needs and responsibilities for it are settled separately.
How is customer information protected?
Access reviews cover customer files, support mailboxes and shared documents in Microsoft 365 or Google Workspace. Sign-in controls, staff-computer protection, offboarding and backup then apply to those managed systems. Subscriber databases and ticketing platforms need their own controls and owners.
What evidence is available for customer and insurance reviews?
Reports can document the controls Teclara runs, including administrator access, sign-in policies, computer coverage, backup and restore tests, and alert handling. The provider stays responsible for its own answers, contracts, insurance application and regulatory conclusions.
What happens when a security alert is raised after hours?
People on the security team review alerts around the clock and act on the ones that point to a real threat. What the team can do to contain an incident depends on the systems covered, the access available and the actions you approved in advance. The provider stays responsible for service continuity and any customer or regulator notifications.
What isn’t included?
The provider decides which customer-information rules, contracts, regulatory duties and notification rules apply. Network, voice and service infrastructure, subscriber, billing and provisioning platforms, and regulatory interpretation each need their own owner and are covered only if added in writing.
Based in Oakville, serving Canada remotely, excluding Quebec.
Work is delivered remotely from Oakville, and there are no offices in the other listed areas.
Your team’s security, looked after.
Not sure where to start? A 15-minute call about staff accounts, email and devices is the easiest way.