Complete
For legal, healthcare, finance, and energy
Who this fits
Regulated, insured, or audited businesses in law, healthcare, finance, and energy.
What Complete is for
Complete is for businesses that answer to regulators, insurers, or auditors: law, healthcare, finance, and energy. It includes everything in Professional and adds the planning and evidence those relationships demand.
You get identity protection for Microsoft 365, one vulnerability assessment a year, a vCIO roadmap, after-hours response for critical incidents, and compliance support, all inside the plan.
Because the work is already being done, cyber-insurance and compliance questionnaires become much simpler. ECS supports your compliance program operationally. We do not issue formal HIPAA, NERC, or legal attestations.
What changes for you
Audit and insurance answers on hand
Questionnaires pull from work already being done, instead of a scramble to prove it after the request arrives.
Stolen logins caught early
Identity protection detects compromised Microsoft 365 accounts and rogue mailbox rules, and locks the account before data leaves.
A technology plan with an owner
The vCIO roadmap ties budget, risk, and replacements to one plan that leadership reviews every quarter.
What's included
Grouped by what it does for the business, rather than by the tools behind it.
Support and response
- Unlimited remote help desk, 8 a.m. to 6 p.m. CT, Monday to Friday
- Support by ticket portal, phone, and email
- Every ticket prioritized, with response targets reported at each business review
- Onsite support included
- After-hours and weekend response for critical incidents
Endpoints and accounts
- Endpoint monitoring, patching, remote control, and asset inventory
- Microsoft 365 or Google Workspace administration and license management
- Managed antivirus: Microsoft Defender configuration and monitoring
Managed security
- Huntress managed endpoint detection and response with a 24/7 human security operations center
- Huntress identity protection for Microsoft 365
- Barracuda email protection, cloud backup, security training, and a password manager
- One vulnerability assessment per year
Strategy and compliance
- Quarterly business reviews plus a vCIO technology roadmap
- Compliance support for HIPAA and cyber-insurance questionnaires, with policy templates
Vendors and documentation
- One point of contact for your phone system, internet provider, printers, and line-of-business software
- Network documentation and a client runbook
Complete answers cyber-insurance and compliance questionnaires from work it already does.
What Complete does not include
Worth knowing before a call rather than after one.
- Supports your compliance program but does not replace your auditor, counsel, or compliance officer.
- After-hours coverage is for critical incidents. Other after-hours work is billed hourly.
- The included assessment covers Small, Medium, or Large scopes. Larger scopes are quoted.
- Remediation of assessment findings is quoted separately.
Questions about Complete
- No. We run the controls, keep the evidence, and support your program. Formal attestation comes from your auditor or compliance officer.
- A business-down event: a server, internet, phones, or email offline for the company, or an active security incident. Complete has a 24/7, 30-minute response target for these.
- Yes. Complete clients receive one Small, Medium, or Large assessment per year, with a written report and a readout for leadership.
- Yes. We support law firms, healthcare practices, and energy operators. Our case studies show how we work in those environments.
Does ECS certify us as HIPAA or NERC compliant?
What counts as a critical incident after hours?
Is the vulnerability assessment really included?
Do you have experience in regulated industries?
Is Complete the right fit?
Twenty minutes with an ECS engineer, and an honest answer either way. If a different plan suits you better, we will say so.