// MANAGED SUPPORT · HANS STUDY · ONTARIO, CANADA

Managed network and server support

The failure that costs the most is never the one anyone saw coming. It is the SQL database nobody capped, the certificate nobody renewed, the antivirus exclusion nobody wrote down, three years after the person who configured it left. Preventative care catches that class of failure before it becomes an outage. Two ways to work together, both remote, both delivered by one CISSP-certified consultant, not routed through a helpdesk queue.

This is not seat-based helpdesk. There is no per-user ticket queue and no script-reading tier one. The scope is the infrastructure a business actually depends on: the network, the servers, the security systems running on them, and the accounts and access sitting over the top. If that is what is at risk when something breaks, this is the right fit. If the need is Outlook troubleshooting and printer queues for forty employees, a seat-priced MSP will do that better and cheaper than an independent consultant should.

Two ways to work together

MNS-01

Managed network and server care

A recurring retainer. Monitoring on the servers and network infrastructure that matters, patching and maintenance on a schedule instead of by accident, and a monthly report that says what changed and what needs attention before it needs an emergency call. Sized to what the environment actually has: a handful of servers and a core switch stack for a small business, up to a full VMS and access control estate for a security-systems client.

What gets watched and maintained: Windows Server patch status and health, SQL Server memory caps, recovery models, and maintenance jobs, disk space and PoE budget on the switches carrying cameras and access control, certificate expiry, backup completion and restorability, antivirus and Defender exclusions kept current and documented, firewall rule hygiene, and account and access review on a cadence rather than never.

Starting at $1,250 a month.

Start a scoping conversation →

MNS-02

On-demand remote support

Available without a retainer: block hours or a fixed-scope contract for network and server work that needs doing now: a migration, a hardening pass, a stalled project, a switch replacement, a Genetec or access control server that has started misbehaving, coverage while an internal IT person is out. Same technical depth as the retainer, without the commitment, and it converts to a retainer later if the environment is a fit for one.

This is also the fastest way to start working together.

For most engagements I send a small hardened device that plugs into your network. It gives me a secure connection for the length of the work, so nothing gets installed on your servers or workstations. When we're done, you unplug it and ship it back.

Describe the work →

CAD, plus HST.

Remote delivery via the DHD, a remote access device. Terms apply.

Vulnerability management add-on

For clients working toward CPCSC, CMMC, or ISO 27001 who need scan evidence rather than a one-time penetration test. Quarterly authenticated scans, triage, a remediation tracker, and notes written for an assessor, added on top of managed care or run on its own.

Starting at $1,950 a quarter.

CAD, plus HST.

Remote delivery. Terms apply.

Where this sits next to the rest of the practice

A health check is a scheduled look at a system in isolation, a fixed deliverable, done once or on an annual cadence. Managed care is the same discipline, running continuously, so the findings a health check would surface get caught before they need one. When the need is strategic rather than operational, a written security program, board reporting, vendor and risk decisions, that is fractional CISO work: senior security leadership on retainer, one level up from keeping the infrastructure healthy. Some clients run both at once. Most start with managed care or on-demand support and add the CISO layer once the infrastructure underneath it is stable.

Independent, the same way everything else here is

No product to sell, no reseller margin, no ticket volume to hit. The incentive is a stable network, not a recurring ticket. A&E and channel agreements exist to reach vendor engineering resources and carry no revenue; the independence page explains how that works. What gets recommended is what the environment needs, not what pays the most to install.

Recent field notes

The kind of drift this catches, documented from real engagements.

MNS-05

Centralized event forwarding →

A log on the box that gets compromised is a log the attacker can clear. Forwarding it off the host is what makes monitoring mean something.