Patch management
Operating system and common application updates on supported devices are tracked and applied on a recurring cadence instead of assumed.
Endpoint security
Security is a maintained baseline, not a one-time checkbox.
Antivirus, patching, and access hygiene are only useful when someone owns them every month. The baseline sits inside the same managed relationship as device and Microsoft 365 work-not a hidden add-on discovered after an incident.
Recurring baseline work
Four habits, kept every month.
These habits are what a monitoring conversation should actually name-see what we actually monitor for the fuller recurring checklist.
Endpoint protection
A maintained anti-malware or EDR-class tool runs on supported devices and is monitored for obvious failures, not installed once and forgotten.
Access hygiene
Multi-factor authentication expectations, local admin rights control, and account review connect to the same Microsoft 365 and device work-not a separate silo.
Encryption and loss basics
Drive encryption status and a lost-or-stolen-device response are agreed in advance, not improvised during the incident.
A boundary worth naming
Baseline maintenance is not a formal security review.
Baseline maintenance
Routine patching, protection, and access hygiene inside the managed relationship, plus coordinating a response when a device is lost or activity looks suspicious. MFA, SSO, and conditional access are covered in more depth in identity and access management.
Formal security review
Penetration testing, compliance audits against a specific framework, security scoring or benchmarking engagements, and incident forensics typically need a dedicated specialist scope.
Honest limit: no baseline eliminates risk, and this page does not promise an “unhackable” environment. The goal is fewer of the ordinary incidents that most days actually bring, with a documented response when something still happens - see what that documented response looks like.
Before signing
Questions for a proposal.
- Which devices are actually covered by the baseline-every supported endpoint, or a subset?
- Who reviews access and admin rights, and on what cadence?
- What is the agreed process when a device is lost, stolen, or shows suspicious activity?
- Is multi-factor authentication a condition of service, or an optional recommendation?
Connect the work
See how the baseline fits device decisions and responsibility.
Reach the team
Tell us what needs an owner
Share your team size, current support setup, and the responsibilities you want clarified. We will use that to figure out whether an MSP introduction makes sense.
Online requests are not available right now. No message is sent from this page.