Frequently asked questions Page 14 of 27

Frequently asked questions — page 14

• How do you plan a backup that allows for real disaster recovery?

  It is planned with a strategy of external copies, automation, appropriate retention, and restoration testing. Additionally, it defines what is recovered, in what time frame, and with what priority based on the impact of the incident.
• What cybersecurity approach is a priority: perimeter, endpoint, or both?

  The usual approach is a layered one: protect the perimeter to reduce exposure and the endpoint to stop threats that have already entered. The priority depends on the type of business, attack surface, and security maturity.
• What IT solutions do most businesses need first to reduce downtime and security risk?

  Most businesses start with managed IT support plus proactive monitoring, patching, and a reliable backup strategy. From there, they add security controls such as endpoint protection, access management, and incident response processes.
• How do managed IT services handle monitoring, patching, and incident response?

  A managed IT provider typically monitors systems continuously, applies updates and maintenance according to a defined schedule, and follows an escalation workflow when incidents occur. The goal is faster detection, faster resolution, and fewer repeat issues.
• Can an IT provider help with compliance requirements like HIPAA, PCI-DSS, or SOC 2?

  Yes, if the provider can map compliance needs to practical controls and provide evidence. Look for documented processes around access control, logging, backup, vulnerability management, and risk assessments.
• What should I expect during onboarding and the first 30–60 days of managed IT?

  Expect an assessment, baseline monitoring setup, documentation, and ticket workflow alignment. In the first weeks, the provider stabilises systems, resolves urgent gaps, and measures performance so improvements are visible quickly.
• How do I estimate the cost of downtime and the potential ROI of IT solutions for my business?

  Start by estimating the cost per hour of disruption (lost revenue, labour time, customer impact, and recovery effort). Then compare that with the expected reduction in downtime and security incidents, plus total cost of ownership.
• What is the difference between a cybersecurity audit and a penetration test or ethical hacking?

  The audit evaluates controls and security levels with evidence and criteria, translating findings into recommendations. The penetration test simulates attacks to check exploitability; ethical hacking usually focuses on the technical verification of attack paths.
• What deliverables are included in a cybersecurity audit and what should the report contain?

  It typically includes a report with objectives, scope, methodology, findings, risk assessment, and prioritized recommendations. The key is that each finding is supported by evidence and that there is a remediation plan focused on impact.
• How often should a cybersecurity audit be conducted?

  It depends on the level of risk, changes in the environment, and compliance requirements. As a reference, it is recommended to review periodically and especially after significant changes (new systems, migrations, network expansions, or incidents).
• What type of audit do I need if my priority is the security of websites and eCommerce?

  A web application and attack surface-oriented audit is usually advisable (including configuration, access controls, dependencies, and exposure). In some cases, it is complemented with specific penetration tests to validate exploitability.
• How is the scope (which systems and accesses are audited) defined for an effective audit?

  It is defined by systems, users, data, locations, and dependencies (for example, VPNs, remote access, and web services). Evaluation criteria, time windows, required permissions, and what evidence will be collected to support conclusions are also established.
• What’s the difference between a Security IT Audit and a compliance audit?

  A Security IT Audit evaluates how security controls work in practice to reduce risk (configurations, monitoring, exploitability). A compliance audit focuses on meeting specific regulatory or framework requirements and proving evidence for them.
• How often should we run a Security IT Audit?

  Most organisations run it at least annually, then more frequently when major changes occur (new systems, migrations, new remote access, or after incidents). A risk-based cadence is usually the most defensible approach.
• Should we use internal teams, external auditors, or both?

  Internal teams can support scoping, evidence gathering, and remediation ownership. External auditors add independent testing and specialist skills, and a hybrid model is common for balanced coverage and credibility.
• What’s included in a Security IT Audit report, and how should findings be prioritised?

  A strong report includes an executive summary, evidence-backed findings, risk/severity rationale, affected assets, and clear remediation steps with owners and timelines. Prioritise by likelihood, impact, and exposure of critical systems.
• Which testing approach is best: vulnerability scanning, penetration testing, or a mix?

  Vulnerability scanning is best for broad coverage and fast identification of weaknesses. Penetration testing is best for validating exploitability and business impact. A mix is often optimal: scan first, then target pentesting where risk is highest.
• Do you offer IT support in Madrid for companies without a contract?

  Yes. We can adapt to non-contract models through hour packages or annual service, depending on the level of demand and the criticality of the environment. Monthly maintenance can also be contracted with clear conditions.
• Does the service include remote support and on-site assistance when necessary?

  Yes. We prioritize remote resolution to reduce downtime and escalate to on-site assistance when the case requires it (hardware, installations, or specific interventions).
• How does the helpdesk work and how quickly is an urgent incident addressed?

  The helpdesk is managed through tickets with prioritization and escalation by levels. For urgent incidents, the corresponding circuit is activated and the status of the management is documented until closure.
• Can you manage cybersecurity (disinfection, hardening, and protection) within the support?

  Yes. We include protection measures and best practices, as well as disinfection and hardening when appropriate. We also reinforce continuity with backups and restoration verification.
• What model is suitable for me if I don't want to contract monthly maintenance?

  If your demand is irregular or you want to avoid a fixed monthly cost, an hour package usually fits. If you are looking for more stable planning and coverage without monthly maintenance, the annual service is a common alternative.
• Is Madrid a tech hub?

  Yes. Madrid has a strong technology ecosystem, with companies, corporates, international organisations, and a growing network of digital and IT services. For businesses, this typically means more local expertise and mature support options.
• Which company is best for IT support?

  The “best” provider depends on your scope, SLAs, and security needs—not just brand size. Compare deliverables (helpdesk, endpoints, Microsoft 365), response targets, escalation paths, and onboarding approach.
• What companies are headquartered in Madrid?

  Madrid hosts a mix of large corporates and technology-driven organisations across multiple sectors. If you need support for specific stacks (Microsoft 365, Azure, endpoints), prioritise providers with proven operational experience.
• Who are the big 5 tech companies?

  The term “big 5” can vary by ranking and region. For IT support decisions, focus less on generic lists and more on whether the provider supports your actual environment and compliance requirements.
• What should be included in IT support services for companies in Madrid?

  Look for helpdesk coverage, incident/request management, endpoint and Microsoft 365 support, monitoring and preventative maintenance, and clear SLAs. Security integration and a structured onboarding plan are also key.
• Do IT support providers offer 24/7 support in Madrid?

  Some providers offer extended or 24/7 coverage, but many operate within business hours. Confirm your required coverage model, response targets, and escalation rules before signing.
• What companies are good to work for in Barcelona?

  To choose an IT maintenance provider, consider experience, methodology, responsiveness, and specialization in business environments. Also, check references, security technologies, and how they manage backups and incidents.
• What are the best big data companies in Barcelona?

  If your need is big data, look for providers focused on analytics, infrastructure, and operations. For general IT maintenance, prioritize IT support, security, networks, and continuity, and then integrate data projects if applicable.
• What are the largest companies in Barcelona?

  The size of the client does not determine the quality of service. What matters is that the provider has a working model for businesses, with preventive reviews, ticket management, security, and backup verification.
• What is IT maintenance?

  It is the set of actions to keep equipment, networks, and systems in good condition: preventive reviews, fault correction, security updates, and backup verification. Its goal is to reduce downtime and risks.
• What does IT maintenance for companies in Barcelona include?

  It includes preventive reviews, remote and on-site support, maintenance of networks/servers, and incident management. Additionally, security and backup verification are considered to ensure recovery in case of failures.
• Do you offer remote support and also on-site assistance?

  Yes. Remote support resolves most incidents quickly, and on-site assistance is activated when physical intervention or on-site diagnosis is required. The goal is to maintain operational continuity.
• What’s the difference between IT maintenance and IT managed services for companies in Barcelona?

  IT maintenance usually focuses on keeping systems running through scheduled checks and support for incidents. IT managed services typically adds broader, ongoing management of infrastructure and performance, often with more defined monitoring and reporting.
• What should be included in a preventive maintenance plan for business computers and IT equipment?

  A solid plan includes health checks, patch management, security reviews, backup integrity verification, and hardware inspections. It should also define how often checks happen and what actions are taken when risks are detected.
• How do you handle incidents and how quickly will support respond?

  You should receive clear SLA targets for standard requests and urgent issues, plus an escalation path. Ask what qualifies as “urgent”, who responds first, and how progress updates are communicated.
• Do you assign a dedicated technician, and how does escalation work if they’re unavailable?

  Some providers assign a dedicated technician to improve continuity, while others use a team model. Either way, you should confirm escalation rules, coverage hours, and who takes ownership during absences.
• Can IT maintenance be delivered remotely, and when would on-site support be necessary?

  Remote support is often effective for monitoring, patching, helpdesk, and many incident resolutions. On-site support is typically needed for hardware replacement, physical network work, or when remote access is insufficient.
• What does a complete cybersecurity service for companies in Valencia include?

  It typically combines protection (network and endpoints), detection (monitoring and event analysis), and response (playbooks, containment, and recovery). Additionally, it should include reporting and follow-up with SLAs.
• How do I choose between a Security Operations Center and a more basic solution?

  If you need continuous visibility and coordinated response, a security operations center adds value. If your maturity is initial, start with minimum viable protection and detection, scaling to operations when you have data and processes.
• What cybersecurity training should staff receive to reduce risks?

  Focus on phishing and impersonation, good password practices, and secure use of email and access. Training should be repeated and measured with improvement indicators.
• What deliverables and reports should a company receive after activating security operations?

  You should receive periodic reports with relevant events, status of controls, managed incidents, prioritized recommendations, and compliance evidence. Also, an executive summary for management.
• If we have already suffered an incident, how is the response and recovery managed?

  A response process is activated: containment, analysis, eradication, restoration from backups, and verification. The provider must coordinate the recovery and document the lessons learned to prevent recurrence.
• What’s included in a managed cybersecurity service with 24/7 monitoring?

  Typically it includes continuous monitoring of security events, alert triage, escalation paths, and incident support under defined SLAs. You should also receive regular reporting that explains what was detected, what actions were taken and what to improve next.
• How quickly can an incident response team assess, contain and monitor again?

  A strong provider defines response time targets in the SLA and outlines the workflow: assessment, containment, eradication steps, recovery and post-incident monitoring. Ask for example timelines and how they measure “monitor again” effectiveness.
• Do you provide vulnerability analysis and remediation support, or only detection?

  Look for vulnerability management that goes beyond scanning: prioritisation by risk, remediation guidance, implementation support and verification after fixes. Clarify whether remediation is included or billed separately.
• Can cybersecurity services be tailored to our industry (e.g., manufacturing, agri-food, logistics/port)?

  Yes—tailoring should reflect your operational risks, network layout, data flows and continuity requirements. Ask how the provider adapts controls for email, endpoints, segmentation, access and backup/recovery to your specific environment.
• What should we ask for during a free consultation to compare providers fairly?

  Request scope clarity, SLAs (response and resolution targets), monitoring coverage, reporting format, incident response process, and evidence of past outcomes. Also ask for a fixed-price or transparent cost model and what is included in on-site versus remote support.
• What is the difference between IT consulting and IT support for SMEs?

  IT consulting defines the 'what and why': diagnosis, priorities, and roadmap. IT support executes the 'how on a day-to-day basis': incidents, maintenance, and operational continuity.
• Do you offer an initial meeting to assess my company's situation?

  Yes. An initial assessment is conducted to understand the state of systems, networks, licenses, and business needs. Based on this, priorities and an action plan are proposed.
• Do you work with Microsoft 365 and systems and network administration?

  Yes. We include systems and network administration, as well as support/management focused on Microsoft 365. We also help structure identities, licenses, and best usage practices.
• Can you provide on-site and remote support, and what is your availability?

  We offer on-site and remote support, with service during office hours. Depending on the agreed model, service levels and response times are defined to ensure continuity.
• What documentation or deliverables will an SME receive after the diagnosis?

  An inventory and a risk analysis are provided, along with a priority plan. The goal is for the SME to have a clear roadmap for modernization without losing stability.
• What IT consulting services do you offer specifically for SMEs in Madrid?

  We provide IT strategy and governance, cloud and productivity consulting, ERP/CRM and integration planning, and cybersecurity and compliance readiness. We also connect recommendations to managed support so improvements are implemented and maintained.
• Can you start with an IT assessment and then propose a roadmap?

  Yes. We begin with an audit of your current environment and service gaps, then produce a prioritised roadmap with clear deliverables. The plan is designed to be realistic for SME teams and aligned with business objectives.
• Do you support cloud migration, ERP/CRM selection, and implementation?

  We support cloud migration planning and execution readiness, including Microsoft 365 and Azure-focused work. For ERP/CRM, we help with selection criteria, integration considerations, and rollout coordination to reduce operational disruption.
• How do you handle cybersecurity and compliance requirements for small teams?

  We apply security-by-design with layered controls, proactive monitoring, and risk-based prioritisation. We also consider compliance needs such as GDPR readiness and operational governance, so security is practical, not theoretical.
• What are your engagement options (fixed project vs ongoing IT consulting support)?

  You can choose fixed-scope consulting projects or ongoing IT consulting support with SLA-based managed services. For day-to-day stability, we can include helpdesk, patch management, monitoring, and maintenance with predictable monthly costs.
• What companies offer cloud services?

  Infrastructure and platform providers, as well as MSPs and consulting firms that manage migration and operations, offer cloud services. In practice, the offering is combined with security, backup, and managed support.
• What companies sell cloud services?

  They are usually cloud providers (public or hybrid) and partners that market solutions like IaaS, SaaS, and storage. There are also companies that sell the complete managed service with SLA.
• Which company is known for its cloud services?

  There are several well-known companies in the public cloud market, especially for their ecosystem of services. The choice depends on security requirements, compatibility, and operational model.
• What are 3 public cloud companies?

  Common examples of public cloud include Microsoft Azure, Amazon Web Services (AWS), and Google Cloud. The best option depends on your architecture, applications, and security policies.
• What cloud services do you offer in Barcelona for companies: migration, maintenance, and support?

  We offer migration with diagnosis and planning, managed operation with monitoring and preventive maintenance, and support with defined response times. Additionally, we enhance security and continuity with backups and recovery.
• Can you customize the cloud plan according to the size and current infrastructure of my company?

  Yes. We start with an audit and inventory to map dependencies and risks, and from there we design a plan tailored to the environment. The goal is to avoid unnecessary changes and control costs.
• Does the service include backups, disaster recovery, and security measures for my data?

  It includes a cloud backup strategy, failure recovery, and security measures appropriate to the risk level. Operational testing and verification are also included to ensure recovery is effective.
• What levels of support do you offer (hours, response times, and monitoring)?

  We define SLAs and monitoring in the accepted scope. Each on-site intervention in Barcelona is confirmed according to location, available resource, timing, scope and access.
• Who are the big 4 cloud providers?

  The commonly referenced “big 4” are AWS, Microsoft Azure, Google Cloud, and IBM Cloud. Many buyers also consider Oracle Cloud depending on their workload needs and regional availability.
• Who are the biggest cloud providers in Europe?

  In Europe, the largest providers by market presence typically include AWS, Microsoft Azure, and Google Cloud, alongside strong regional offerings and local partners. Your best choice depends on compliance, data residency, and support coverage.
• Who are the top 5 cloud service providers?

  A typical shortlist includes AWS, Microsoft Azure, Google Cloud, IBM Cloud, and Oracle Cloud. For procurement, it’s also worth evaluating managed service partners that can deliver SLAs, security controls, and integration support.
• What big tech companies are in Barcelona?

  Barcelona is home to a wide range of technology and digital companies, including major enterprise and software ecosystems. For cloud projects, the most relevant “big tech” angle is often the platforms your business already uses (for example, Microsoft 365/Azure).
• Which cloud model (SaaS, PaaS, or IaaS) is best for a Barcelona company starting a new digital project?

  SaaS is usually best for fast adoption with minimal operational overhead. PaaS fits teams building applications with managed platform services. IaaS is best when you need full infrastructure control, but it requires stronger governance for security and operations.
• What should we ask cloud providers in Barcelona to compare security, SLAs, and support properly?

  Ask for documented SLAs (response and resolution), incident escalation, backup and disaster recovery approach, access control and encryption, and how endpoint and identity security are handled. Also request evidence of compliance support and integration capability.
• How much is charged for cybersecurity in Madrid?

  It depends on the scope (consulting, managed services, SOC, incident response) and the size of the environment. It is common to structure it by project and/or by monthly service with an SLA, with prices varying according to the number of locations, users, and criticality.
• What are 3 cybersecurity brands?

  There are many options, but in typical projects you’ll often see network and endpoint security platforms from well-known providers, as well as backup and recovery solutions. The choice should be based on compatibility, coverage, and support—not just the brand.
• How much does a cybersecurity professional get paid?

  Compensation varies by role (analyst, engineer, consultant, manager), seniority, and sector. Generally, the more specialized and operationally responsible (detection, response, architecture), the higher the salary range.
• How much is paid for a job in cybersecurity in Spain?

  The cost depends on the type of work: auditing and hardening, implementation of controls, training, or ongoing management with monitoring and response. To budget well, it is recommended to define deliverables, timelines, evidence, and level of service.
• Is Spain good for cyber security?

  Spain has a growing cybersecurity ecosystem with increasing demand from enterprises and public organisations. For buyers, the practical advantage is access to local delivery capacity and service partners that can support compliance and operational security needs.
• Does cybersecurity pay well in Spain?

  Cybersecurity roles are generally well-compensated due to skills scarcity and high business impact. Pay levels vary by seniority and specialism, but demand for SOC, incident response, and security engineering typically supports competitive compensation.
• Which country is no. 1 in cyber security?

  There is no single universally agreed “number one” country, because rankings depend on metrics such as workforce, investment, and incident readiness. Instead of focusing on a country label, compare providers by service scope, capability, and evidence of delivery.
• What are the big 5 cybersecurity companies?

  The “big 5” can vary depending on the source and whether you mean vendors, managed service providers, or consultancies. For procurement, prioritise the provider’s relevant capabilities (SOC/MDR/SIEM/IR) and how they integrate with your environment.
• What’s the difference between SOC-as-a-Service and MDR?

  SOC-as-a-Service typically focuses on monitoring, triage, and analyst-led investigation under a defined process. MDR usually adds broader detection engineering and managed response capabilities, often with tighter integration to endpoint and cloud telemetry.
• Do I need SIEM-as-a-Service if I already have internal monitoring?

  You may still benefit from SIEM-as-a-Service if your current monitoring lacks correlation, normalisation, or consistent alerting. The key is whether you can reliably turn logs into actionable detections and documented response workflows.
• How quickly can a provider start 24x7 monitoring in Madrid?

  Timelines depend on onboarding readiness, telemetry access, and agreed coverage scope. A strong provider will define a start plan (data onboarding, tuning, and runbooks) so you know what happens in the first weeks.
• What should be included in an incident response engagement?

  Look for clear triage steps, escalation paths, evidence handling, containment actions, and post-incident reporting. Also confirm how the provider coordinates with your internal IT and security teams during the incident lifecycle.
• Can cybersecurity providers help with GDPR compliance and security awareness training?

  Yes. Many providers support GDPR-aligned governance, risk documentation, and security controls, plus awareness programmes that reduce human-factor risk. Ensure deliverables are defined and measurable, not just generic training materials.
• Do you offer IT services in Madrid for companies with preventive maintenance?

  Yes. We include preventive maintenance with reviews and a proactive approach to reduce incidents. Additionally, we report on the status of the environment and recommended actions.
• Can support be remote and also on-site when necessary?

  Yes. We combine remote support to quickly resolve most incidents with on-site attention for specific interventions. The model adjusts to the criticality of the business.
• How quickly do you respond to an incident and how is it prioritized?

  Priority is defined by criticality and service agreement. A process of diagnosis, escalation, and execution is established to minimize the impact on operations.
• Does the service include networks and security (firewalls, VPN) within IT consulting?

  Yes. We design and configure secure networks and implement protective measures such as firewalls and VPNs. Security is integrated into daily operations, not just in specific projects.
• Do you manage equipment repair and data recovery with confidentiality?

  Yes. We perform hardware and software diagnostics and, when applicable, recovery with confidentiality criteria. The goal is to restore continuity with minimal downtime.
• Do you work with IT outsourcing (On-Site / Off-Site) to cover peaks or eliminate the internal department?

  Yes. We offer IT outsourcing as an external department to cover peaks, reduce internal workload, and provide technical capacity. The service adapts to the size and needs of the client.
• What should be included in an IT maintenance contract in Madrid?

  A solid contract should define scope (devices, sites, users), response and resolution targets, escalation rules, reporting cadence, and exclusions. Ask for clear boundaries between maintenance, project work, and cybersecurity tasks.
• How do IT services providers measure service levels and response times?

  Providers typically track ticket categories, first response time, time to resolution, and SLA compliance rates. Request examples of dashboards or monthly reports and confirm how priorities and escalation are handled.
• Do I get remote support, on-site technicians, or both for IT services in Madrid?

  Many organisations use a hybrid model: remote support for speed and on-site intervention for hardware, installations, or complex incidents. Confirm coverage, expected deployment times, and how on-site requests are scheduled.
• Which questions should I ask before hiring a cybersecurity or IT management provider?

  Ask what security controls are included (monitoring, hardening, remediation workflows), how incidents are communicated, and how backup and disaster recovery are validated. Also confirm vendor partnerships and how changes are documented.
• How can I compare pricing models (hourly vs managed/retainer) for IT services in Madrid?

  Compare pricing against the defined scope and service levels, not just the headline rate. Clarify availability, included hours, per-device or per-site assumptions, and what triggers extra costs (projects, travel, third-party tools).
• What does a national IT service provider for businesses include?

  It typically includes remote and on-site technical support, IT maintenance, incident management, and, depending on the scope, networks, backups, and cybersecurity. The key is that the operational model is consistent across all locations.
• Can I centralise support for multiple locations with a single provider?

  Yes. Centralisation usually works through ServiceDesk/HelpDesk, with ticket classification, assignment by competencies, and remote escalation. This maintains a single point of contact and traceability of the status of each request.
• How is incident support coordinated across different locations?

  Support is coordinated centrally. Each on-site intervention is confirmed according to location, available local resource or partner, timing, scope and access; specialist remote escalation follows the documented process.