CarpaTech
Client Portal
Foundations
Cloud and Modern Workplace
Microsoft 365 deployment and migration. Azure infrastructure and backup. Intune, Teams and SharePoint.
Endpoints, email and the network, watched and hardened. Vulnerability scans on a schedule, ISO 27001 and GDPR controls written down, and training for the people who click things.
Nobody fails an audit on the firewall.
They fail on the evidence. The controls exist, but nothing records that they were applied or tested, so a client questionnaire or an ISO 27001 assessor finds a gap that was never really a gap. We close the technical holes first, then leave the documentation that proves they are closed. The second part is the one that takes months if it starts late.
What we put in place.
The technical controls and the paperwork that proves they are running. Both, because one without the other fails the questionnaire.
- Endpoint protection on every managed device, with encryption enforced
- Email security: anti-phishing, attachment scanning and DMARC
- Firewall, VPN and network segmentation reviewed against the estate
- Multi-factor authentication on every account that touches company data
- Vulnerability scanning on a schedule, with the findings ranked and worked
- ISO 27001 and GDPR control mapping, with the evidence kept current
- Awareness training and simulated phishing, run for the whole company
- An incident response plan naming who does what, before it is needed
How we get there.
We look at what is there
Every device, account, mailbox and firewall rule, written down. Most gaps turn up here rather than in a scan.
We close the holes
Ranked by what an attacker would reach first, not by what is easiest. You see the list and what each item costs to fix.
We keep the evidence
Scans, training records and control mapping stay current, so the next questionnaire is a download rather than a project.
Covered from Base. Audited from Premium.
Antivirus, multi-factor authentication and endpoint management run on every plan from Base upward. Advanced security policies, firewall and VPN management arrive with Premium, which also carries an annual security audit; CarpaCare makes that quarterly. ISO 27001 readiness work and remediation projects are scoped and quoted separately.
Projects, migrations and build work are quoted separately and covered by the same SLA.
The rest of this group.
The other three every client starts with. Most people take all four, because none of them stands up well on its own.
Not sure what an auditor would find?
We look at what you have, tell you where the gaps are, and put a number against closing each one. No audit fee, no obligation.