Cybersecurity
Most breaches are boring.
A user clicks something. An unpatched endpoint runs it. MFA wasn't enforced on the admin account. Backups hadn't been tested. The fix is rarely exotic — it's discipline applied across the layers you already have. That's where FCG starts.
Included with MSP Base Level
The security floor every customer gets.
These aren't add-ons. They're the baseline of what FCG considers a managed environment.
Endpoint Detection & Response
EDR with ransomware detection on every managed endpoint. Lightweight, tuned for managed environments — not the bloated suite that came bundled with someone else's laptop.
24/7 Managed SOC
Real-time threat detection from a security operations center, around the clock. Alerts triaged before they hit your inbox.
Identity hardening
Microsoft 365 / Entra ID configured the way it should be — MFA enforced, conditional access, sane defaults, no leftover legacy auth.
Patch + backup discipline
OS patching automated. Endpoint backup tested as part of onboarding. The boring controls that prevent most of what would otherwise be an incident.
Compliance add-on — $45 / seat / mo
When the framework matters.
For environments that have to meet a specific framework. We configure the technical controls, generate the evidence, and stay between audits. Certification is the auditor's job — but you'll have what they ask for.
NIST
800-171 / CSF baseline. Hardening, logging, and reporting aligned to the controls federal contractors and their subs are asked to demonstrate.
CMMC
Level 2 controls for the Defense Industrial Base. We configure what you need; the auditor certifies.
PCI
Cardholder data environment scoping, segmentation, logging, and the documented controls QSAs look for.
HIPAA
Technical safeguards for ePHI: access control, audit, integrity, transmission security. The administrative-safeguard work is yours; we handle the technical side.
Beyond the baseline
Project work, scoped per engagement.
When you need more than the recurring controls — a pen test before an audit, an IR retainer, a phishing-simulation program — we scope it as a project at reduced T&M rates for managed customers.
- Penetration testing (scoped per engagement)
- Security risk assessments + gap analysis
- Incident response (retainer or break-fix)
- Phishing simulations + security awareness training
- Microsoft 365 / Entra hardening review
- Backup + disaster recovery design and testing
If you're already in an incident
Stop typing into chat boxes and call. (866) 677-3012. We'll triage immediately whether or not you're a current customer. Containment first, blame later.
Start with a security read.
The Free Assessment includes a posture review against the current threat landscape. Honest read on where the gaps are. No pitch.