Managed compliance monitoring.
Every month, your cloud setup gets checked against security benchmarks and frameworks. A person looks at every finding before anything changes, and a quarterly report shows what is fixed, what is open and what evidence you have.
Rather not book now? Leave your email and we'll get in touch.
We reply within 24 hours. Privacy policy
Send a message or email hello@teclara.tech
Monthly review and follow-up
Security settings and access are compared with known benchmarks each month, and anything that has changed is flagged. Every finding is reviewed by a person, and the noise is cleared out before deciding what to fix first.
It is a separate service with its own price. It is not included in Managed Security & Compliance or Managed IT.
- Baseline: Initial security checks
- The systems and controls to check are agreed with you, and a first assessment records where things stand.
- Monthly: Configuration reviews
- Changed settings, new cloud resources and permission changes are caught each month instead of waiting for a yearly review.
- Review: Check each finding
- A person investigates new findings, removes irrelevant results, and recommends what to address first.
- Correct: Track fixes
- Each confirmed issue gets a plan and an owner. Fixes that Managed Security & Compliance covers are made under that service, and other work can be quoted.
- Quarterly: Progress and evidence report
- The quarterly report lists completed work, open issues and supporting records for you to review.
Quarterly reporting
Each quarterly report lists completed checks, open findings, progress on fixes and evidence to share with an auditor or client.
- Systems and technical controls assessed
- Changes since the previous review
- Corrected findings and remediation details
- Open decisions, funding and responsibilities
- Evidence available for external review
Systems covered
Coverage starts with Microsoft 365 or Google Workspace. Azure, AWS, Google Cloud and engineering systems such as GitHub can be added.
Microsoft 365 or Google Workspace
Administrator access, sign-in protection, sharing, email, collaboration settings, logging, retention, and configuration changes as staff and responsibilities change.
Azure, AWS, or Google Cloud
Checks cover accounts and access, resources exposed to the internet, storage, encryption, logs and network settings for the cloud resources you choose.
GitHub, infrastructure as code, Kubernetes and container images
If you want your software delivery covered, checks include code repository protection, infrastructure definitions, deployment settings, cluster security and known flaws in container images.
Frameworks
Findings and evidence can be mapped to CIS benchmarks and the technical parts of SOC 2, ISO 27001, NIST, PCI DSS, HIPAA and GDPR, so they line up with what your auditor or client asks for.
Fixes that Managed Security & Compliance covers are made as part of that service.
Managed Security & ComplianceService questions
How is this different from the monitoring already included?
Managed Security & Compliance monitors Microsoft 365 and Google Workspace for risky changes and includes a quarterly review. Managed Compliance Monitoring is a separate service with its own price. It gives you documented monthly checks, a running record of findings and fixes, evidence linked to the relevant framework, and a quarterly report for clients, insurers or auditors.
Does the service certify compliance?
No. It supports your compliance work but does not certify compliance or give an audit opinion. The checks and records cover technical security controls only, and policies, governance, contracts and other non-technical work stay with you. Your auditor, lawyer, regulator, insurer or certification body decides which rules apply and whether you meet them.
Can this support SOC 2 or ISO 27001 work?
Yes, for the technical side. Findings and evidence can be mapped to the relevant parts of SOC 2, ISO 27001, CIS, NIST, PCI DSS, HIPAA or GDPR. Policies, governance, staff practices, contracts and other non-technical work need their own evidence and review.
What happens when a new issue appears?
Each new finding is reviewed by a person before anything is recommended. Fixes that Managed Security & Compliance covers are made under that service. If a fix would affect cost, access, how people work or business risk, the trade-off is explained and you decide.
Is the service available without Managed Security & Compliance?
Yes. On its own, it finds issues and recommends fixes, and the fixes can be quoted separately. With Managed Security & Compliance as well, the fixes that service covers are made under it.
Need evidence for an audit or a client?
On the call we'll talk about who you report to, which systems matter and what we would check.
No obligation.