Is the introduction free?
Yes. It establishes the question and mutual fit. Technical research and the Microsoft 365 Security Check are paid work.
Do I have to choose ongoing management immediately?
No. A project or assessment can be standalone. Ongoing management always has its own scope, onboarding and SLA.
What does a starting price mean?
The starting price applies to a suitable standard scope. Quantities, management boundaries, starting condition and support needs determine the final price. Onboarding, licences and options are itemised separately.
Is the baseline fully CIS-compliant?
The baseline uses applicable elements from current CIS Benchmarks and relevant Microsoft recommendations as references. Full CIS compliance is only claimed when it has been demonstrably assessed across the complete agreed scope. Licences, business needs, exceptions and risk acceptance can lead to documented deviations.
How are changes and exceptions documented?
Relevant changes, decisions and exceptions are recorded within the agreed management scope. The exact format, reporting frequency and source are defined per customer, so we do not promise a dashboard or report that does not fit the selected service and licences.
Will First Aid IT have access to our environment?
Only when required for the agreed service. Ongoing management uses an agreed partner or management route with least-privilege access. A customer-controlled export or temporary access may suit a one-off assessment.
Is this a 24/7 help desk or SOC?
No. Support windows, response times and escalation routes are agreed per customer. Full 24/7 monitoring, forensics and unlimited end-user support are not automatically included.