What’s in the kit

The domain is the one thing every other system leans on. Get it wrong and email lands in junk, the website points at a parking page and nobody can find the registrar login.

• Domain registered or transferred into an account your firm owns, with registrar lock and two-factor on the login
• DNS hosted on Cloudflare with DNSSEC, tidy records and a short written map of what each one is for
• SPF, DKIM and DMARC published from day one, with DMARC monitoring so you can see who sends as you
• Defensive look-alike domains where they matter, pointed somewhere sensible

A new tenant is the only time you get to set everything correctly with nothing to break. We support Google Workspace as properly as Microsoft 365, which plenty of providers can’t say.

• Multi-factor authentication required for every account before it’s handed out
• Admin accounts separated from day-to-day accounts, with break-glass access documented
• External sharing, guest access and mail forwarding set to firm-appropriate defaults
• Mailboxes, shared mailboxes, groups and calendars named and structured for how your firm works
• Canadian-hosted backup of mail, files and calendars, running before the first client email arrives
• Licences matched to roles so nobody pays for features they won’t use

The fastest way to undo a clean tenant is to hand out laptops that were set up at a kitchen table. Every device arrives managed, so a lost laptop is a policy question, not a crisis.

• Business-grade hardware sourced to a short standard list, with warranty in the firm’s name
• Enrolled in device management so settings, apps and encryption apply automatically
• Managed endpoint detection and response, watched around the clock
• Operating system and application patching on a schedule
• DNS filtering to block known-bad sites before they load
• Asset list with serial numbers, owners and warranty dates

Internet circuits have lead times measured in weeks, and landlords have opinions about cabling. This is the module that most often decides whether day one is day one.

• Business internet ordered early, with a backup connection where the work can’t stop
• Firewall configured, updated and documented, with remote management
• Separate Wi-Fi for staff and guests, with coverage checked in the actual space
• Cabling and electrical needs coordinated with your landlord and contractors
• Printers and scanners set up with scan-to-email and secure release where needed
• Meeting room screens and video calling tested before the first client meeting

Migration is where launches slip. We rehearse it, measure it and schedule the final pass for when nobody is working.

• Inventory of what is moving, what is staying and what you’re entitled to take
• Dry run on a sample of mailboxes and folders to measure time and catch surprises
• Final cutover scheduled overnight or over a weekend
• Old addresses forwarded or monitored so client email isn’t lost in the gap
• Permissions on shared files rebuilt to match the new structure

Fifteen people typing their own signatures produces fifteen versions of your logo. One template, applied centrally, looks like a firm from the first email.

• Signature built to your brand, tested in the mail apps your clients use
• Applied centrally, including on phones, so it doesn’t depend on each person
• Disclaimer and regulatory wording where your profession requires it

Clients will search for you the day the announcement goes out. A simple, credible site that says who you are and how to reach you beats a perfect one that’s still in draft.

• Built and hosted by KDTS Web, our web practice
• Professional profiles, practice areas and contact details
• Secure by default: HTTPS, security headers and no plugins to patch
• Ready to publish the moment the announcement goes out

Insurers, regulators and larger clients will ask for written policies. Adopting short, accurate ones at launch is far easier than writing them after an incident.

• Acceptable use policy that staff will actually read
• Multi-factor authentication and password policy
• Backup and retention policy matching what is actually configured
• Incident response plan with who to call and what to do first

A new entity often needs a new policy, and the application asks about MFA, backup, endpoint protection and training. We build so those answers are true from the start.

• Controls mapped to the questions insurers commonly ask
• Evidence your broker can rely on: what is in place and since when
• A free KDTS Cyber Insurance Policy Review of your policy wording, or email insurance@kdts.ca

The team that built your environment already knows it. Ongoing care means monitoring, patching, support and an annual review, without a second onboarding.

• Documentation of everything we built, kept current
• Monitoring, patching and support from day thirty-one
• A named contact for staff questions and new hires
• An annual review of security, licences and insurance requirements