Cyber-insurance renewals, client questionnaires, and board risk reviews now ask for evidence, not adjectives. This is the security floor every managed IT client gets, and the audit trail behind it.
SOC 2 Type 2 attested
NetFusion Designs is independently audited to the SOC 2 Type 2 standard — trust services criteria across security, availability, and confidentiality. Not a checklist we filled out; a report a third party signs.
MFA on every account
Multi-factor authentication is mandatory across Microsoft 365, VPN, admin consoles, and privileged internal systems. No exceptions, no long-term bypass tokens, no shared logins.
EDR on every endpoint
Endpoint detection and response with a 24/7 SOC watching the alert stream. Not signature-based antivirus — behavioural detection that catches things AV misses, with automated containment.
Backup verification
Immutable backups with Canadian data residency, tested by monthly automated restore and quarterly manual restore drills. If your backup has never been restored, you don't have a backup — you have a hope.
Disaster recovery drills
Annual tabletop and one live failover per managed client. Recovery time and recovery point objectives are documented per system, not guessed at during the incident.
Documented change control
Every configuration change to a production system goes through review and is recorded in the ticket. When something breaks at 11 p.m., we know what changed at 3 p.m.