Vicinity Group

"24/7 SOC monitoring" sounds reassuring on a security quote. But it can mean a real team that knows your business and responds in minutes, or an anonymous offshore queue that logs your alert and waits until morning.

The difference matters most at 3 a.m., when attackers like to strike. Before you sign, ask: Who staffs your SOC, and where? Will the same team answer when I call? What happens in the first ten minutes after an alert?

We break down the questions that reveal the truth.

https://www.vicinity.team/resources/announcements/real-soc-or-offshore/

Just signed with a managed IT provider? Here's what the first 90 days should actually look like.

Good onboarding isn't instant. It starts with documenting your whole environment, deploying monitoring and security tools, and then honestly telling you what they found, failing backups, missing MFA, gear past its lifespan, and fixing the dangerous stuff first.

By day 90 you should have a clear, documented picture of your own technology, often for the first time. If your provider can't tell you what they found and what comes next, that's a red flag.

https://www.vicinity.team/resources/announcements/msp-onboarding-first-90-days/

Hearing "co-managed IT" at work and worried it means you're being phased out? It usually means the opposite.

A good co-managed setup gives your in-house IT person backup. The partner handles overnight monitoring, patching, and the tough escalations. You keep the relationships and the knowledge of how your business actually runs, and you finally get to take a weekend off.

Here's what shared IT really looks like, and how to make sure it's set up to help you. 👇

https://www.vicinity.team/resources/announcements/co-managed-it-and-your-job/

Ransomware attackers go looking for your backups first. If they can wipe your safety net, you're much more likely to pay.

That's the whole reason "immutable" and "air-gapped" backups exist. Immutable means locked so no one can change or delete it, even with stolen admin access. Air-gapped means disconnected, so a compromised network can't reach it. The best setups use both.

One catch: a protected backup only matters if you can actually restore from it. We test restores rather than assume they work. Not sure where you stand? We'll give you a straight answer.

https://www.vicinity.team/resources/announcements/immutable-vs-air-gapped-backups/

Your IT company got bought, the email promised things would be better than ever, and now support somehow feels worse. Slower responses, a portal instead of a person, technicians you've never met. You're not being difficult for noticing.

Service often slips after an acquisition because scale tends to sand down the local relationship you originally chose. The trick is telling a temporary bump from a real decline, and knowing you're not trapped either way.

We walk through how to decide calmly.

https://www.vicinity.team/resources/announcements/msp-acquired-service-worse/

That cyber insurance questionnaire looks like simple paperwork. But every answer is a promise your insurer relies on, and a hopeful "yes" you can't back up can get a claim denied when you need it most.

The questions are more specific than they seem. "Do you have MFA?" usually means email, VPN, and admin accounts. "Do you have EDR?" Basic antivirus doesn't count. "Are backups tested?" Having them isn't the same as testing them.

When you're not sure, confirm each control in writing before you sign. Here's how to do it right:
https://www.vicinity.team/resources/announcements/cyber-insurance-questionnaire-honestly/

Got three IT quotes and one is way cheaper? Before you celebrate or walk away, find out why.

A lower price almost always means a smaller scope. The cheap quote often leaves out security, backup for Microsoft 365, after-hours coverage, and on-site support, the stuff you don't see until something breaks. Some providers also win the contract low, then bill everything else back to you.

Ask what's included, what's not, and where your support team actually sits. The answers change what that low price is really buying.

https://www.vicinity.team/resources/announcements/why-is-this-msp-quote-cheaper/

You've seen the pitch: a report showing your team's passwords "for sale on the dark web." Alarming by design. So is dark web monitoring real, or just a scare tactic?

A bit of both. It can catch an exposed password early, which is genuinely useful. But most findings are old or already changed, and an alert nobody acts on is just noise.

Think of it as a smoke detector. MFA, endpoint protection, and tested backups are the walls and sprinklers. You want the detector, but not instead of the walls.

Handed a scary report? Bring it to us for an honest read.

https://www.vicinity.team/resources/announcements/is-dark-web-monitoring-worth-it/

Every MSP's website says roughly the same thing: responsive support, strong security, a partnership you can trust. The marketing rarely helps you tell them apart.

What does? The questions you ask. Like: Who actually answers when I call? What's included and what isn't? And the awkward but revealing one, what happens to my data and passwords if we ever part ways?

We're an MSP too, so read with a little skepticism. But we'd genuinely rather you choose the right fit, even if it isn't us.

https://www.vicinity.team/resources/announcements/how-to-choose-an-msp/

If you pay an IT company every month, it's fair to assume your data is backed up. But the honest answer is often "some of it."

The usual gaps: Microsoft 365 email and files (Microsoft keeps the service running, but protecting your data is your job) and the files sitting only on laptops and desktops.

Ask your provider four questions, in writing: What's backed up? How often and how far back? Is it safe from ransomware? When was a restore last tested?

We're a local team in Alaska and Hawaii, happy to give you an honest read. 👍

https://www.vicinity.team/resources/announcements/does-your-msp-back-up-your-data/