Below the Rapids

In many small organizations the escalation plan is one person's phone. This post covers alert fatigue, vacation gaps, writing an escalation matrix, and what MSP monitoring handles overnight in co-managed IT.

Co-managed IT lets your in-house IT manager keep the job and share the load with an outside MSP. Here is who it fits across industries, how the work usually splits, and what the agreement should say.

Microsoft 365 blocks a lot of junk on its own, but targeted phishing still reaches inboxes. Here is what to layer on top, and how co-managed IT splits quarantine tuning and the daily "is this safe?" questions.

MDR vs EDR comes down to software versus people. Here is what each one does, why a small internal IT team can run EDR but can't watch alerts all night, and how co-managed IT splits the work.

Nearly 500 new vulnerabilities a day, attacks within days of disclosure, and a PHP flaw exploited before the patch shipped. Why monthly patching no longer holds up, and why we are moving client devices to daily patching.

DNS filtering stops known-bad sites before a connection starts. In co-managed IT the harder part is deciding who approves allow-list requests, who reads the logs, and who closes the bypasses.