# Cybersecurity services for Michigan businesses The controls your insurer asks about, run by people who watch the alerts. A cybersecurity company in Metro Detroit: endpoint detection and response, 24/7 SOC monitoring, identity and email security, awareness training, and the evidence your auditor or cyber insurer wants to see. ## What's included - **Endpoint detection & response.** EDR on every device with managed detection and response behind it: alerts reviewed by people around the clock, and isolation actions agreed in advance. - **24/7 SOC monitoring.** Sign-ins, endpoints, email, and the Microsoft 365 tenant watched by a security operations team that calls you when something is wrong, not a dashboard you are expected to check. - **Identity & access management.** Enforced MFA, conditional access, least-privilege admin accounts, and a documented onboarding and offboarding process for every user. - **Email security & awareness training.** Filtering for phishing, impersonation, and payment fraud, plus security awareness training and phishing simulations so staff recognize what gets through. - **Backup & ransomware recovery.** An immutable backup copy an attacker cannot delete, restores tested on a schedule, and a written recovery plan, because the security question that matters most is how fast you are back. - **Vulnerability & patch management.** Operating systems, applications, and firmware scanned and patched on a schedule, with the exceptions documented and a date to close them. - **Security baseline & hardening.** A standard configuration for workstations, servers, firewalls, and the Microsoft 365 tenant, aligned to CIS Controls v8.1 IG1 and mapped to NIST CSF 2.0. - **Compliance evidence.** The reports and screenshots your cyber insurance application, HIPAA risk analysis, PCI questionnaire, or FTC Safeguards Rule review asks for, produced from the tools rather than written from memory. - **Incident response.** A written plan for the first hour, containment steps agreed in advance, and your cyber insurer engaged first, because most policies require it. ## Why security is a separate page Every managed IT seat at LNX includes a baseline: EDR, MFA, and email filtering. This page is the full stack on top of it, for businesses whose insurer, regulator, or own close call has raised the bar. It can be bought with managed IT, added to an environment your own IT staff run, or layered onto another provider's support. The tools are the same either way; what changes is who is watching and what they are allowed to do when an alert fires. ## What a security engagement looks like It starts with a review: what you run, who can reach what, what an attacker would find first, and where you stand against the controls your insurer or regulator lists. The review ends in a ranked list with costs. Then the baseline goes in, followed by monitoring. From then on you get a monthly report of alerts, patch status, backup results, and training completion, and the evidence pack when renewal or audit season comes around. ## What we will not claim We do not certify anyone, and we will not sign a compliance attestation on your behalf. Your auditor, examiner, or insurer decides whether you comply. What we do is run the controls, keep the evidence, and show which control each tool covers, so that conversation is short. Michigan businesses in healthcare, financial services, auto retail, and defense manufacturing usually have a specific framework in mind, and we map to it. ## Who this is for Businesses renewing cyber insurance, practices under HIPAA, dealers under the Safeguards Rule, and anyone who had a close call. Industries: [Nonprofit organizations](https://lnxinc.com/industries/nonprofit/), [Senior living](https://lnxinc.com/industries/senior-living/), [Financial services](https://lnxinc.com/industries/financial-services/), [Retail](https://lnxinc.com/industries/retail/), [Professional service providers](https://lnxinc.com/industries/professional-service-providers/), [Healthcare practices](https://lnxinc.com/industries/healthcare/), [Manufacturing](https://lnxinc.com/industries/manufacturing/), [Warehousing & logistics](https://lnxinc.com/industries/warehousing-logistics/), [Auto dealerships](https://lnxinc.com/industries/auto-dealerships/). ## Related services - [Managed IT Services](https://lnxinc.com/services/managed-it/): Someone watching it, and someone answering when it breaks. - [IT Support & Help Desk](https://lnxinc.com/services/it-support/): A person answers, a ticket is opened, and it gets fixed. - [IT Consulting](https://lnxinc.com/services/consulting/): An honest read on what you have and what it should cost. ## Offices - [Troy office](https://lnxinc.com/locations/troy-mi/): 1395 Wheaton Dr Suite 500, Troy, MI 48083. Monday to Friday, 8am to 4pm. - [Pontiac office](https://lnxinc.com/locations/pontiac-mi/): 555 Friendly Rd, Pontiac, MI 48341. Monday to Friday, 8am to 5pm. ## Common questions **Our cyber insurance application asks about MFA, EDR, and backups. Can you help?** Yes. Those questions are the baseline. We put the controls in, then produce the evidence the application or renewal asks for, from the tools rather than from memory. **Can you add security to IT support we already have?** Yes. The security stack runs alongside another provider's or your own IT team's support. We agree in writing who does what when an alert fires. **What happens if we are hit by ransomware?** Call the number in your agreement. Isolation steps are agreed in advance, so the first hour is containment, not a debate. Then restore from the immutable backup copy, and work through your cyber insurer's process, which usually has to be engaged before anything else. **Do you follow a security framework?** Our baseline is aligned to CIS Controls v8.1 Implementation Group 1 and mapped to NIST CSF 2.0. For HIPAA, PCI DSS, the FTC Safeguards Rule, and CMMC we map the same controls to that framework's language. **How much does cybersecurity cost?** Per seat per month for monitoring and tooling, with the initial review priced separately. Quotes are firm after the review, and nothing in it obliges you to buy the rest. ## Contact Book a security review: https://lnxinc.com/contact/?intent=quote&service=cybersecurity or call 833-569-5690.