Managed Security & Compliance
Protection for accounts, email, devices and cloud data, with people reviewing alerts around the clock.
Rather not book now? Leave your email and we'll get in touch.
We reply within 24 hours. Privacy policy
Send a message or email hello@teclara.tech
Security for Microsoft 365 and Google Workspace
Microsoft 365 or Google Workspace is watched for threats, protections are kept up to date, and anything found is followed through to a fix.
It works alongside your own IT staff or your current IT provider. Who approves changes, and who acts in an incident, is settled before anything starts.
Ongoing security coverage
Protections are kept current as staff, software and threats change, and every alert is investigated as it comes in.
Application lockdown, which only lets approved software run, is planned around the tools your staff rely on, including specialist software, with exceptions where they are needed.
Device monitoring and protection
Enrolled laptops, workstations and servers are watched for threats. Application lockdown stops unapproved software from running, and it is rolled out around the business software your staff need.
Identity monitoring and security logs
Cloud sign-ins are watched for signs of account takeover. Security logs stay searchable for 30 days and are archived for a year, so incidents can be investigated later.
Daily cloud backup
Microsoft 365 and Google Workspace are backed up every day (both, if you use both), and staff can restore their own email and files from an earlier point.
Phishing and impersonation protection
Filtering helps catch messages built to steal information or redirect a payment before they reach the person being targeted.
Patching and vulnerability management
Operating systems and supported apps are updated on a schedule, with the riskiest known weaknesses fixed first.
Security administration for Microsoft 365 or Google Workspace
Accounts, licences, access rules and routine changes are handled so the security settings stay the way they should.
Cloud configuration monitoring
Changes to Microsoft 365 or Google Workspace settings, sharing and permissions are flagged, reviewed and put right.
Security awareness training
Short courses and simulated phishing help staff recognize suspicious messages and requests.
Quarterly security reviews
Each quarter, the protections, any gaps and the next actions are reviewed with you, and each action gets an owner.
Security records and quarterly reviews
A record of the security work makes questions from clients and insurers easier to answer. Each quarter, open issues and priorities are reviewed with you, and every follow-up gets an owner.
Monthly checks and quarterly reports against a security framework come through Managed Compliance Monitoring, a separate service with its own price.
Explore compliance monitoringClient security questionnaire reviews
Additional services
Servers, specialist software or extra demands from your own clients can be covered with an add-on, priced before it is added.
Server and workstation backup
Servers, legacy applications, or critical workstations sit on-premises.
Backup extends to business-critical servers and workstations. Full images are kept on a local appliance and copied to encrypted cloud storage, checked automatically, and can be restored as single files or whole systems.
Extended security logging
A framework or an insurer asks for more than a year of logs.
Security logs are kept longer and gathered from more sources, giving a fuller record for formal investigations and audits.
Managed private networking
Staff reach office systems remotely, or an aging VPN needs replacing.
A private, encrypted network that connects staff, offices and servers. Access uses each person’s Microsoft or Google sign-in, is checked against the device they are on, and is logged, so office systems can stay off the open internet without a hardware appliance.
Email spoofing protection
Someone could fake your email domain, or a client asks for enforced DMARC.
Setup and ongoing management of DMARC, SPF and DKIM, the email records that tell other mail servers who may send from your domain. They make your domain harder to fake, and reports show who is sending mail in its name.
Leaked credential monitoring
Passwords may have been reused, or accounts have appeared in past breaches.
Checks breach data for exposed staff logins and passwords, so the affected account can be reviewed and the password changed.
Managed password manager
Logins live in browsers, spreadsheets, and shared notes.
An encrypted vault for company logins, set up when staff join and removed when they leave. Shared accounts can be shared safely, admin logs show who can open each one, and there is less need to keep logins in browsers, sticky notes and spreadsheets.
Extended cloud application monitoring
Business apps run beyond Microsoft 365 and Google Workspace.
Settings monitoring extends beyond Microsoft 365 and Google Workspace to other business apps such as Salesforce, Slack and GitHub. Connected third-party apps become visible, and suspicious access can be restricted where the integration allows it.
Ongoing AI usage monitoring
AI tools are already in daily use.
Shows which AI tools staff use and where company data may be going, so risky use can be reviewed and addressed between formal reviews.
Virtual CISO and compliance program
A client or board wants a named security owner.
A dedicated security leader who owns your security roadmap and compliance work, and handles audits and client security reviews.
Client perspective
Teclara materially improved both our operational responsiveness and our security posture.
E.C.
Senior Leadership, GTA Consulting Firm
Pricing and terms
Managed Security & Compliance and Managed IT are priced per user and per device, plus mobile devices where they apply, with a one-year minimum term. The price depends on which services you choose. The quote comes with a clear list of who does what, before anything starts.
One-off reviews and fixes are available as fixed-price projects.
Browse fixed-price projectsNeed day-to-day IT support too? Managed IT adds a business-hours helpdesk and runs your IT, with this security service included.
See Managed ITNot sure which option fits? A 15-minute call is the easiest way to find out.
Service questions
How is pricing calculated, and what is the minimum term?
Managed Security & Compliance and Managed IT are priced per user and per device, plus mobile devices where they apply, with a one-year minimum term. The price depends on which services you choose. A written quote comes before any work starts.
How does the service work alongside an existing IT team?
It sits alongside them. Before monitoring starts, you and Teclara agree what each side handles, which tools and licences are used, who approves changes and what Teclara can do in an incident.
How does application lockdown account for essential software?
It starts with a list of your essential software, plugins and specialist workstations, including CAD, BIM and rendering tools. Lockdown is tested with a pilot group first, exceptions are set, and there is an agreed way to undo a wrong block. Specialist software not on the list should be raised early so the plan covers it.
What does Managed Security & Compliance include?
Covered devices get managed detection and response (MDR), where software spots attacks and people respond, plus application lockdown, patching and vulnerability management. In the cloud, Microsoft 365 and Google Workspace are backed up (both, if you use both), with email and fraud protection, tenant management, and sign-in and settings monitoring. Staff get security awareness training, and there is a quarterly security review. People review alerts around the clock and respond when the evidence points to a threat.
Does managed security require full IT delegation?
No. It works with an internal IT team, an outside IT provider, or a small team with no IT staff at all. If you want a helpdesk and full IT administration too, Managed IT includes Managed Security & Compliance.
How does this help with cyber insurance and client security reviews?
Records of device monitoring, email protection, backup, sign-in monitoring and staff training are ready to show insurers and clients. The quarterly review covers any gaps and who is fixing them.
Which platforms are supported?
Microsoft 365 and Azure, and Google Workspace and Google Cloud. Anything else gets checked first to see whether it can be supported.
Not sure where to start?
On the call we'll go through your systems, who handles your IT now, and what we would take on.
No obligation.