// 01 — STRATEGY & ADVISORY

IT Consulting

Vendor-independent advisory engagements that inform technology decisions before capital is committed. Each consulting engagement is led by a senior practitioner with hands-on operational experience in the platforms under evaluation.

SVC_C01

Infrastructure Assessment

End-to-end audit of the network, compute, identity, endpoint, and cloud estate. Findings, gap analysis, and prioritized remediation plan delivered in writing.

CIS Benchmarks NIST CSF
SVC_C02

Cloud & M365 Strategy

Migration roadmap covering tenant design, identity strategy, workload sequencing, licensing, and cost modeling. Includes pilot scoping where appropriate.

Azure M365 Entra ID
SVC_C03

Network Architecture Review

Topology, routing, segmentation, and security posture review with documented recommendations. Suitable for pre-acquisition diligence and refresh planning.

BGP / OSPF SD-WAN VLAN
SVC_C04

Vendor & Procurement Advisory

Independent vendor selection, RFP authoring, technical evaluation matrices, and contract review. Compensation is decoupled from product procurement.

RFP / RFI TCO
SVC_C05

IT Governance & Policy

ITIL-aligned policy authoring, standard operating procedure development, change-management framework design, and ISO 27001 readiness assessment.

ITIL v4 ISO 27001
SVC_C06

TCO & License Optimization

Microsoft, Cisco, and SaaS license rationalization. Right-sizing analysis with documented savings opportunities and consolidation recommendations.

Licensing Audit SAM
SVC_C07

Disaster Recovery Planning

RTO/RPO definition, DR architecture, runbook authoring, and tabletop exercise facilitation. Aligned to business continuity requirements.

RTO / RPO BCP
SVC_C08

Technology Due Diligence

Pre-acquisition technical due diligence covering infrastructure debt, license compliance, security posture, and integration complexity assessment.

M&A Compliance
// 02 — OPERATIONS

IT Infrastructure Support

Managed operations across the production stack. Engineering and run services covering network, compute, identity, endpoints, and the workspace platforms users depend on. Delivered under documented SLAs with monthly reporting.

SVC_O01

Network Operations

LAN, WAN, and Wi-Fi engineering and run support. Configuration management, change control, performance monitoring, and incident response.

Cisco IOS Junos Aruba
SVC_O02

Server Administration

Windows Server (AD DS, Group Policy, IIS, file services) and Linux (RHEL, Ubuntu LTS, CentOS Stream) administration with patch management.

Windows Server Linux AD DS
SVC_O03

Virtualization & Hypervisor

VMware vSphere, Microsoft Hyper-V, and Proxmox deployment and operations. Capacity planning, snapshot strategy, and HA configuration.

vSphere Hyper-V Proxmox
SVC_O04

Microsoft 365 Administration

Exchange Online, SharePoint Online, Teams, and Purview administration. Conditional Access policy, MFA enforcement, and tenant compliance.

Exchange Online Teams SharePoint
SVC_O05

Identity & Access Management

Entra ID (Azure AD) and on-premises AD operations. SAML/SSO integration, conditional access, privileged identity management, and lifecycle automation.

Entra ID SAML SSO
SVC_O06

Endpoint Management

Microsoft Intune, Jamf, and SCCM operations. Device enrollment, compliance policy, application packaging, and software distribution.

Intune Autopilot SCCM
SVC_O07

Asset Lifecycle Management

Hardware procurement, imaging, deployment, refresh, and end-of-life processing. Full inventory maintained in a structured CMDB.

CMDB Snipe-IT CMDBuild
SVC_O08

Backup & Disaster Recovery

Backup design, replication strategy, off-site retention, and quarterly recovery testing. Veeam, Azure Backup, and equivalent platforms.

Veeam Azure Backup
SVC_O09

Tiered Helpdesk (L1–L3)

Structured ticketing with documented SLAs covering response, restore, and resolution. ITIL incident, problem, and change processes.

ITIL v4 SLA Zendesk
SVC_O10

Monitoring & Alerting

24/7 infrastructure observability across network devices, servers, and cloud workloads. Threshold-based alerting with on-call escalation.

PRTG Zabbix Azure Monitor
SVC_O11

Patch & Vulnerability

Coordinated patch deployment for OS, firmware, and application layers. Quarterly vulnerability scanning with remediation tracking.

WSUS Intune
SVC_O12

Cloud Operations

Azure tenant operations, hybrid identity via Entra Connect, cost governance, and ongoing rightsizing. Includes resource lifecycle management.

Azure Entra Connect
Commercial Models

Three engagement structures, one operating philosophy.

Engagements are shaped by environment complexity, internal capability, and operational tempo. Selection is finalized following a discovery call and infrastructure assessment.

Frameworks & Standards

Aligned to recognized standards.

Our delivery methodology is grounded in established industry frameworks. We do not reinvent process — we apply it consistently.

FRAMEWORK

ITIL v4

Service operations, incident management, problem management, and change control are structured against the ITIL v4 service value system.

FRAMEWORK

NIST Cybersecurity Framework

Security posture assessments and remediation roadmaps map findings to NIST CSF functions: Identify, Protect, Detect, Respond, Recover.

FRAMEWORK

ISO 27001 Alignment

Policy authoring and control implementation aligned to ISO 27001 Annex A. Suitable for organizations preparing for certification readiness.

FRAMEWORK

CIS Controls v8

Endpoint hardening, asset inventory, and access control configurations baselined against Center for Internet Security guidance.

FRAMEWORK

Microsoft Cloud Adoption

Azure and M365 migrations follow the Microsoft Cloud Adoption Framework: strategy, plan, ready, adopt, govern, manage.

FRAMEWORK

KCS v6 — Knowledge

Operational knowledge is captured and reused under Knowledge-Centered Service principles. Runbooks and resolutions evolve with the environment.

Need a service we have not listed?

The catalog above represents standard offerings. Bespoke engagements covering specialist platforms, integrations, or one-time programs are routinely scoped on request.