Managed cybersecurity with 24/7 monitoring, threat detection, and the documentation insurers ask for.

What does 'managed cybersecurity' actually include?

What you get depends on the tier. Every managed IT plan starts with managed antivirus and EDR on every covered device, email security and spam filtering, patch management, automated backups and MFA setup. Complete adds DNS filtering, dark web monitoring, firewall management and security awareness training. Advanced adds SIEM with a 24/7 Security Operations Center, compliance documentation and incident response planning. The full list is on the pricing page.

The two acronyms that come up most: EDR is the technology - the agent on each device that watches for suspicious behavior. MDR is EDR plus a 24/7 human team reviewing the alerts. That human team is a SOC partner we contract with, not NHM staff, and it comes with the Advanced tier and with our Workstation and Server Protection plans. We deploy it, manage it, and are the people you talk to about what it found.

Related: Defense in Depth (EDR/MDR), Email Security

Is this proactive or reactive, and what happens during a real incident?

Proactive. The whole point of managed cybersecurity is to catch things before they become incidents. The 24/7 monitoring stack is watching every endpoint for behavior that matches ransomware, credential theft, lateral movement, and the other patterns that precede a real incident. When the system flags something, an engineer triages it; if it is real, we contain it.

When an actual incident happens - which is rare, and is why the monitoring exists - the response sequence is documented: triage, containment, eradication, recovery, lessons learned. The same sequence applies whether it is ransomware, a compromised password, or an attacker who got in through a third-party vendor. The monthly report shows what was caught and what was done; the after-action report after an incident shows what we will do differently next time.

Related: Ransomware Recovery Planning

What does it cost and does it satisfy cyber-insurance and HIPAA requirements?

Plans run $50-$100 per user per month across three tiers: Essentials, Complete and Advanced. EDR, email security and MFA are in every tier; security awareness training starts at Complete, and the 24/7 SOC is in Advanced. Smaller clients can add cybersecurity as a focused package, such as Workstation Protection at $50 per system per month. Quotes are written after a discovery call.

For cyber-insurance renewal: most carriers now ask for evidence of MFA enforcement, EDR coverage on every endpoint, email security beyond the platform default, verified backup with tested restore, and security awareness training. The Complete and Advanced tiers cover all of those, and we produce the documentation insurers ask for at renewal time. For HIPAA: the technical safeguards in 45 CFR 164.312 line up with what we deploy - access control, audit controls, integrity, person or entity authentication, transmission security. The policy, procedure, and workforce-training layers are separate and live on the healthcare page.

Related: Cyber-insurance Readiness, Healthcare IT, Pricing

How is NHM's cybersecurity different from a national SOC or MDR vendor?

Two differences matter. First, the people. NHM is owner-led: the person who sets up your environment is the one who picks up the phone when you call, and who will be onsite if the issue requires it. Round-the-clock alert review comes from a SOC partner, but you never have to deal with them. When they flag something, we are the ones who call you, explain it and fix what needs fixing.

Second, the scope. National MDR vendors sell a stack - their EDR, their SIEM, their threat-intel feed. NHM works with what you have and adds the parts that are missing. If you are already running Defender for Business and need a 24/7 triage team, we wrap around it. If you are starting from zero, we pick the stack that fits your environment and budget. That flexibility is what you give up when you go to a single-vendor national provider.

How do I get a security review and what does it cost?

Free discovery call - 30 minutes. We will look at your current security stack, the controls you have, the ones you are missing, and what cyber-insurance or compliance requirements you are working against. If you move forward, we run an environment review, document the gaps, and propose a phased rollout that lands the critical controls first.

Related: Contact NHM