Retrisa Service Overview

Both plans (Basic and Premium) include:

• Microsoft 365 or Google Workspace administration
• Standard employee account onboarding and offboarding
• User accounts, permissions and multi-factor authentication
• Management of one Windows or Mac computer per user
• Management of one iPhone, iPad or Android device per user
• Operating-system and supported application updates
• Endpoint protection and security policy management
• Encryption and local administrator controls
• Monthly IT health reporting

Premium adds:

• Microsoft 365 or Google Workspace backup
• Management of agreed servers and their backups
• Management of agreed office firewalls, switches and Wi-Fi
• Scheduled security reviews
• Scheduled backup recovery testing
• Expanded reporting on infrastructure and backup health

Quoted or arranged separately:

• Initial onboarding. Bringing your environment up to the managed standard when you join. Quoted after the assessment.
• Additional devices and larger or more complex environments. Beyond one computer and one mobile device per managed user. Built into an agreed subscription quote.
• Preparing or installing new or replacement computers. Standard onboarding covers a new employee’s accounts and access, not their hardware setup.
• Day-to-day employee helpdesk and troubleshooting. The plans cover administration, maintenance and security management.
• Microsoft 365 or Google Workspace subscriptions and other required third-party licenses. Paid to the vendor or reseller, separate from Retrisa.
• Hardware. Computers, phones, servers and network equipment.
• Major projects. For example migrations, office moves or new systems. Scoped and quoted before work starts.

Recurring management is included; major projects such as migrations, office moves or new systems are scoped and quoted separately.

Day-to-day administration and proactive maintenance of the environment your business runs on: account and access requests, monitoring, documentation and the routine work that keeps things from breaking rather than only fixing them afterwards.

The intent is that technology decisions are made deliberately and recorded, instead of accumulating as undocumented one-off changes.

Administration of the directory that controls who can access what: accounts and groups, multi-factor authentication, conditional access policies, privileged account review, stale account cleanup and sign-in review. Identity is usually the most consequential control in a modern environment, so it is treated as a first-class area rather than a side effect of email administration.

Configuration and ongoing administration of Exchange Online, Teams, SharePoint, OneDrive and Entra ID: mail flow and email authentication records, sharing and permission models, retention settings, licensing review and tenant configuration. This includes making sure the security features already included in your existing licensing are actually turned on and configured.

Equivalent administration for organizations on Google Workspace: user and group management, two-step verification enforcement, admin console policy, Drive sharing controls, email authentication records and third-party app access review.

Enrolling and managing laptops, desktops and mobile devices so the fleet is known rather than assumed: inventory, configuration baselines, disk encryption, compliance policy, endpoint protection deployment and a consistent baseline on every enrolled machine. Preparing or installing new or replacement computers is quoted separately.

Operating-system and application updates managed on a defined cadence, with rings or staged rollout where appropriate, reporting on devices that fall behind, and follow-up on machines that repeatedly fail to update — which in practice is where most of the real risk sits.

Layered, practical security work: identity hardening, email security and phishing defenses, endpoint protection, access review, logging and alerting, security configuration review, and prioritized remediation of the findings that would actually reduce risk.

Retrisa does not claim that any control set guarantees prevention of compromise. Security is managed as an ongoing reduction of exposure, with the current state made visible to you.

Backup configuration and monitoring for the agreed systems and data, including Microsoft 365 or Google Workspace data. The parts that matter most are the ones usually skipped: verifying that jobs actually succeed, and periodically testing that a restore works before it is needed. Backup is part of Premium, not Basic; capacity, retention and recovery scope are confirmed before service begins.

Administration and lifecycle management of the agreed physical and virtual servers (Premium): build standards, patching, monitoring, capacity and performance review, virtualization host maintenance, and planning for replacement or migration before end-of-support dates arrive.

Firewalls, switching, Wi-Fi, VLAN segmentation, VPN and remote access: configuration, firmware maintenance, documentation and change control, plus review of remote-access paths, which are a common source of avoidable exposure. Ongoing management of the agreed office firewalls, switches and Wi-Fi is part of Premium; new network projects are quoted separately.

Administration of cloud infrastructure and services, including Microsoft Azure: identity integration, resource configuration, access control, backup and monitoring. Cloud design and migrations are projects, scoped and quoted separately.

A repeatable process for people joining and leaving: account creation with the right access from day one, MFA and license assignment, and — on departure — prompt disabling of access, session revocation, mailbox and data handling, and wiping managed devices. Preparing or installing a new starter’s computer is quoted separately.

Offboarding is treated as a security control, because dormant accounts with valid credentials are one of the most common ways an environment stays exposed after someone has left.