Cybersecurity
Cybersecurity for Austin and Central Texas organizations
Keep the business moving and the systems protected. Our team manages cybersecurity alongside your day-to-day IT support, protecting your accounts, devices, email, and backups.
Who it’s for
Security inside managed IT
We run cybersecurity inside managed IT for Austin and Central Texas organizations with 20 to 1,500 users, at one location or several. That includes clinics, manufacturers, law firms, marketing firms, engineering firms, hi-tech companies, and other organizations that handle sensitive information.
We protect the email system, devices, and backups your team already uses. Our team also helps protect the technology behind your plant, shop-floor, and production operations.
- Clinics and other regulated practices. Patient information and clinic systems stay inside the same managed IT relationship with Healthcare IT or Secure IT.
- Manufacturers. Production lines and shop-floor systems stay segmented from office IT. Designs, recipes, and supplier files stay in approved tools and backups.
- Law firms. Client matter stays in approved tools, with a human in the loop where privilege requires it.
- Marketing firms. Customer lists and ad accounts stay in approved tools and backups.
- Engineering firms. Drawings, models, and client deliverables stay in approved repositories. Our team can cover lab or production systems too.
- Hi-tech companies. Production systems, designs, and proprietary data stay in approved tools and backups.
- Other organizations. Mixed devices, email, and shared files stay inside managed IT, at one location or across several.
- IT and production systems. Identity, email, and devices on the office side. Plant or shop-floor systems when the environment includes them.
What we cover
Threats we address
We focus on the accounts, email, devices, and backups your team uses every day. We review access settings, mailbox forwarding, device protection, and recovery testing, then address the gaps.
Endpoint protection on every device we manage. Conditional Access configured in your Microsoft 365 tenant, with MFA available as an add-on on any plan. DMARC, DKIM, and SPF for mail. Encryption and updates on managed Windows, Mac, iPhone, and iPad. Backups we have actually restored.
- Account takeover and weak identity: MFA gaps and Conditional Access blind spots
- Business-email compromise and look-alike mail: missing or weak DMARC, DKIM, and SPF
- Ransomware and untested backups: restore that has never been proven
- Lost or unmanaged Windows, macOS, iPhone, and iPad devices
- Oversharing and vendor/SaaS access that leaves matter, customer, or design data exposed
Monitoring
We monitor every device we manage and route those alerts to someone who can act. Total IT and Secure IT include managed detection and response (MDR), and Secure IT adds email monitoring.
When something fires, we open a ticket, call our expert team, and stay with it until it is back under control.
- Endpoint alerts on managed Windows, macOS, iPhone, and iPad
- Managed detection and response (MDR), included in Total IT and Secure IT
- Email monitoring, included in Secure IT
- Tested backups and restore readiness
- A path from alert to our expert team
Controls
We run these on the tenant and devices you already use, as part of the same relationship as helpdesk and Microsoft 365.
Admin roles stay tight in Entra, we configure Conditional Access in your Microsoft 365 tenant, and MFA is available as an add-on on any plan. Mail is authenticated with DMARC, DKIM, and SPF, and we watch forwarding so a quiet rule does not sit on a mailbox. Endpoints (Windows, Mac, iPhone, and iPad) stay updated, protected, and encrypted. Backups are tested so a restore is something we have done, not a setting we hope is on.
When plant or shop-floor systems are in the environment, we keep that OT side segmented from office IT.
See Microsoft 365 for how the tenant work is run day to day.
- Conditional Access in your Microsoft 365 tenant, with MFA as an add-on on any plan
- Mailbox authentication and forwarding
- Endpoint protection and encryption
- Tested backup and recovery
Compliance
Most of our clients need the environment they already run to hold up when someone asks how patient data, shop-floor systems, or a contract is protected.
If you handle ePHI, HIPAA is in the relationship. See Healthcare IT. We use NIST CSF to walk through what you have, how you protect it, how you notice a problem, and how you get back to work.
CMMC belongs in the conversation when you sell into defense work. Texas Cybersecurity Safe Harbor (SB 2610) belongs in it for many Texas firms. ISO 27001, SOX, and PCI belong in it when those programs apply to you.
You keep the assessor and the attestation. We run the controls on your tenant, email, endpoints, and backups, and we sit with you when those questions come up.
- HIPAA when patient information is in the environment
- NIST CSF as the way we walk through the program
- CMMC and NIST SP 800-171 compliance when you support defense contracts
- Texas Cybersecurity Safe Harbor for Texas firms that want that safe harbor
- ISO 27001, SOX, or PCI when those programs apply
Services
Cybersecurity services
Each service below has its own page. Start with a cybersecurity assessment, and we will recommend the mix that fits your organization.
Cybersecurity Risk Assessment
A plain-language review of your security, with risks ranked and a practical plan.
Managed Detection & Response
24/7 monitoring and response on your laptops, desktops, and servers, included in Total IT and Secure IT.
Security Monitoring (SIEM)
Logs from across your systems in one place, for visibility and compliance evidence.
Backup & Disaster Recovery
Tested backups, offsite copies, and a clear plan to recover fast.
Email Security
Protection from phishing, impersonation, and spoofing of your domain.
Security Awareness Training
Short lessons and phishing simulations, with training records on file.
Vulnerability Scanning & Penetration Testing
Scheduled scans, fixes in order of risk, and testing that proves what holds up.
Virtual CISO
Part-time security leadership for strategy, policies, and reporting.
Texas SB 2610 Compliance
The cybersecurity program Texas SB 2610 describes, built, run, and documented.
Which rules apply to you? Ten quick questions show which security rules and standards likely apply to your organization.
Packages
Remote IT
$100–$150 / user / month
Remote-first helpdesk, endpoints, and email. A technician can be dispatched when needed.
Unlimited remote supportManaged endpoint protection (antivirus or EDR)24/7 system health monitoringVendor managementMonthly serviceQuarterly business reviews
Total IT
$150–$250 / user / month
Remote support plus a technician in the office when the request needs it.
Everything in Remote ITOn-site supportCybersecurity awareness trainingBusiness continuity planningManaged detection and response (MDR)
Secure IT
$250–$400 / user / month
Everything in Total IT with tighter security and compliance built into the same support.
Everything in Total ITvCISO serviceBusiness continuity solutionEmail monitoringEmail phishing security testingCybersecurity framework guidance
Security
Endpoint protection on every device we manage
Remote IT, Total IT, and Secure IT all include managed endpoint protection from ALCON DTS, with antivirus, endpoint detection and response (EDR), or both on every device we manage. Total IT and Secure IT also include managed detection and response (MDR), and Secure IT adds email monitoring. Multi-factor authentication is available as an add-on on any plan. Already using security tools you rely on? We bring them under our management from the start and move you to our standard tools over time, as your licensing renewals allow.
Resources
Guides
Plain-language guides to the rules Texas organizations ask us about.
Certified expertise
Our team includes a certified NIST CSF 2.0 Lead Implementer. The credential is issued by Certified Information Security.
Next step
Start with a review
We review your accounts, email, devices, and backups, then identify the security work ALCON DTS should manage and how it fits with your IT support.
