Frequently asked questions Page 6 of 10

Frequently asked questions — page 6

• How is pricing calculated—does it depend on the number of devices, and what does each package include?

  Pricing usually depends on the number of devices and the type of environment (workstations, servers, network and security level). Each package defines scope, review frequency and support coverage.
• How do modern PBX systems replicate the functions of traditional telephone switchboards?

  Modern PBX systems automate call connection and routing using dial plans, trunking and switching logic. Where operators were previously needed, PBX features such as attendants and call queues deliver similar control using consistent rules.
• What’s the difference between an operator console and an auto-attendant for call routing?

  An operator console routes calls using human judgement and real-time assistance. An auto-attendant routes calls based on menus, schedules and rules, improving speed and consistency while reducing manual workload.
• When migrating from legacy phone setups, what should we prioritise: trunking, routing rules or user experience?

  Prioritise trunking and routing rules first to ensure calls reach the right destinations reliably. Then validate the user experience with realistic call scenarios so the new system matches day-to-day expectations.
• How did long-distance operator assistance influence today’s call routing design?

  Operator assistance shaped early exception handling and alternative routing when direct paths were unavailable. Today, similar outcomes are achieved through routing logic, failover paths and escalation workflows.
• What benefits should we expect when replacing cable-based switching with automated systems?

  You typically gain faster call handling, fewer manual errors and more measurable control over traffic. Automated systems also make it easier to integrate mobility, reporting and charging policies.
• What does the corporate network service include from diagnosis through to operations?

  It includes discovery and diagnosis, layered design, implementation with validation testing, and a managed operations phase with monitoring and support. The goal is to ensure continuity and reduce risks from the very beginning.
• Do you provide secure LAN networks for IT and OT environments?

  Yes. Segmentation and access control are designed to separate traffic flows and limit exposure. In addition, security policies and hardening are applied so the network is defensible in critical environments.
• Do they include NOC-style monitoring and technical support to maintain availability?

  Yes—continuous operations are included, with monitoring, incident management and preventive maintenance. The focus is to detect anomalies, resolve them quickly and maintain availability according to the agreed scope.
• How do you manage security: firewalls, intrusion detection, encryption and multi-factor authentication?

  They apply defence in depth: perimeter and local network controls (firewalls, IDS/IPS), endpoint protection, encryption and secure remote access. Multi-factor authentication and identity management are also integrated.
• Can you optimise performance and enable SD-WAN for application control?

  Yes. Applications are prioritised, traffic is optimised and centralised policies are applied with SD-WAN. This reduces bottlenecks and improves the user experience.
• What does IT maintenance typically cover for offices (PCs, servers, networks and security)?

  It usually includes support for endpoints and servers, network administration, security configuration and backup monitoring. A managed approach also adds preventive checks and reporting, so issues are reduced—not just resolved.
• Do you offer remote maintenance, on-site support, or both?

  Both are commonly offered. Remote support handles most incidents quickly, while on-site intervention is used when hardware, physical network work or deeper troubleshooting is required.
• Can you provide an initial pricing audit before we commit to a maintenance plan?

  Yes. A proper audit reviews your systems, inventory, backup status and security posture to define scope and effort. After that, you’ll receive a tailored proposal aligned with your needs and budget.
• How are backups handled, and what’s the approach to data recovery?

  Backups are monitored as part of the maintenance service, with tested or documented recovery procedures. The goal is continuity: restore quickly and reduce the impact of ransomware or accidental loss.
• Do you offer hourly maintenance (vouchers), as well as ongoing plans?

  Many providers offer both. Hourly packages are suitable for short-term needs, while monthly plans provide continuity with defined support coverage and service levels.
• Which enterprise cyber security trend should you prioritise first if you have limited resources?

  Start with what reduces impact and recovery time: reliable backups, endpoint hardening, and access control with a Zero Trust approach. Then add AI-driven automation where there’s a high volume of alerts and a need for fast response.
• How can I integrate AI into my strategy without losing control of risk and data?

  Define scoped use cases (alert prioritisation, enrichment, orchestrated response) and put in place governance: data quality, decision traceability and automation boundaries. Complement it with human oversight and testing before scaling.
• Is Zero Trust enough, or do I need to complement it with machine identity management?

  Zero Trust is an access framework, but in modern environments you also need to manage machine and service identities (IAM for automations, APIs and workloads). This prevents “non-human” credentials from becoming an attack vector.
• When does it make sense to adopt Cybersecurity as a Service instead of expanding the internal team?

  When you need continuous coverage, operational expertise, and responsiveness without growing headcount. CaaS is especially a good fit if you already have tools and want orchestration, monitoring, and preventive maintenance with SLAs.
• How can I prepare my organisation for supply-chain and third-party attacks?

  Apply SRM: assess critical suppliers, require security requirements, define contingencies, and diversify dependencies. Operationally, integrate monitoring and response plans to reduce containment time during incidents.
• What should be included in a Corporate Network Service for a multi-site business?

  Expect connectivity for each site plus secure access for users, backed by operational ownership. Ask for defined scope, monitoring, incident response, and measurable SLAs across the full service lifecycle.
• How do SASE and NaaS change what I need to buy compared with traditional VPN/MPLS?

  SASE typically consolidates security and secure access for users and cloud traffic, reducing reliance on site-centric VPNs. NaaS shifts the focus to running the network as a service, often with managed controls and reporting rather than owning all the infrastructure.
• Can I expect multiple quotes, and how should I compare them fairly?

  Yes—request comparable scope documents, the same SLA targets, and the same migration and support coverage. Compare total cost of ownership, not just monthly connectivity pricing.
• What key security and performance outcomes should I ask a provider to deliver?

  For security: layered controls (firewalling, endpoint protection, and patch/vulnerability management) plus secure remote access. For performance: defined availability, response times, monitoring coverage, and user-experience metrics tied to SLAs.
• How do providers handle migration and installation, and how do they ensure billing is correct?

  Ask for a migration plan with cutover steps, a rollback approach, and acceptance testing. For billing, request itemised charges, clear contract boundaries, and a post-installation billing validation process.
• Do you offer IT maintenance for businesses and self-employed professionals in San Sebastián de los Reyes, with remote and on-site support?

  Yes. We tailor support to the level of criticality: urgent incidents may require on-site attention, while the rest is handled remotely to speed up resolution. We define scope and the SLA according to your operations.
• Does your maintenance include backups and protection against cyberattacks?

  It includes backup management and restoration verification, as well as security measures such as system updates, access control, and protection against threats. The details are adapted to the environment (PCs, servers, NAS, and network).
• What’s the difference between preventive and corrective maintenance in your service?

  Preventive maintenance reduces failures through reviews, optimisation, and patch management. Corrective maintenance focuses on diagnosing and resolving incidents when they occur, minimising downtime.
• Do you manage servers and NAS, including file recovery and disk replacement if a component fails?

  Yes. We manage servers and NAS, handle backups, and carry out recovery tests. If a component fails, we plan replacement and service continuity according to the system design.
• How is the price calculated: by number of devices or by type of infrastructure?

  It’s usually calculated based on the number of devices and the type of infrastructure (PCs, servers, NAS, network, and security level). The scope of support, SLAs, and business criticality also affect pricing.
• What’s included in the quote for structured cabling services?

  Normally, it includes an on-site assessment, scope design, installation of cabling (copper and/or fibre), labelling, and certification. Delivery documentation and link validation are also covered before go-live.
• Do you work with both copper cabling and fibre in the same project?

  Yes. It’s common to combine copper for outlets and fibre for backbones or longer-distance links. The design determines which technology best fits needs such as performance, scalability, and requirements for the data centre (CPD) or technical rooms.
• Do you assess on site and update existing cabling?

  We carry out a survey to understand the current cabling status and the business requirements. If needed, we propose re-cabling, reorganisation, and tidying/clean-up (for example, cleaning and arranging the data centre) so the infrastructure is ready.
• How do you ensure quality and the correct delivery of the system?

  We follow a process with careful installation, certification, and link-validation tests. At the end, we deliver documentation, labelling, and handover of the system to make maintenance and incident resolution easier.
• Can you manage projects for new builds, expansions, and upgrades?

  Yes. We can support projects ranging from small installations to broader rollouts, coordinating with the construction team and other disciplines. The aim is to minimise ad-hoc changes and ensure operational continuity.
• What IT Support services do you offer in San Sebastián de los Reyes for small and mid-sized businesses?

  We provide helpdesk and incident troubleshooting, preventive maintenance, and support for servers, networks, and backups. Coverage can be remote, on-site, or a blended model depending on your needs.
• Do you provide remote support, on-site support, or both?

  Both. Remote support is delivered via our maintenance system, and we dispatch a technician on-site when remote resolution isn’t sufficient. The decision depends on severity and impact.
• How do you handle incident tickets, and what is your typical response process?

  Incidents are logged as tickets, prioritised according to business impact, diagnosed, resolved, and then closed with clear evidence. We aim to minimise downtime through fast triage and structured follow-up.
• Can you support specific environments such as Microsoft 365, Windows devices, or business networks?

  Yes. We support common business environments, including Windows endpoints and productivity platforms, as well as business networks and server infrastructure. We tailor the scope to what you’re running today.
• What information do you need to prepare a quote for IT Support in San Sebastián de los Reyes?

  We typically ask about the number of users/PCs, your current IT setup (servers, network, backups), the main pain points, and the coverage model you want. An initial audit helps confirm the scope and priorities.
• Which cybersecurity trends should we prioritise over the next 12 months as a business?

  Prioritise the trends that map to your biggest operational gaps: identity weaknesses, unpatched systems, limited monitoring, and weak recovery. Then focus on AI-assisted social engineering and supply-chain risk where your approval and vendor processes are most exposed.
• How can we defend against deepfakes and identity deception in real business processes (e.g., financial approvals)?

  Add verification steps that are hard to spoof: out-of-band confirmation, role-based approvals, and stronger identity controls. Combine this with monitoring for anomalous communication patterns and clear incident playbooks for suspected fraud.
• What does “shadow AI” mean operationally, and how do we detect and control it?

  Shadow AI is unauthorised or unmanaged AI usage that can leak data or bypass governance. Detect it through endpoint and network visibility, then control it with approved tools, data-handling rules, and guardrails for model/API usage.
• How should we measure success: time to remediate, detection time, or compliance evidence?

  Use a balanced scorecard: time to remediate for operational speed, detection/containment time for effectiveness, and compliance evidence for audit readiness. Track trends over time, not just single-point results.
• What should executives and boards expect in terms of due diligence and reporting for cybersecurity risk?

  Expect board-ready reporting that links risks to controls, shows measurable outcomes (e.g., remediation and resilience metrics), and documents evidence for due diligence. The goal is clarity on what is improving, what remains, and who owns each risk.
• What does a structured cabling service include from design through handover?

  A complete engagement typically covers site consultation, structured cabling design, installation across the required media, testing, and a handover pack with documentation. The goal is a ready-to-operate infrastructure, not just installed cable.
• Do you provide testing and certification, and what documentation will I receive?

  Yes—testing is performed to validate link performance for copper and fibre where applicable. You should receive clear deliverables such as as-built drawings and cut-sheets to support future maintenance and upgrades.
• Can structured cabling support PoE for IP phones, wireless access points, cameras, and displays?

  Structured cabling can support PoE when the design accounts for power requirements, cable category, and correct installation practices. PoE-ready planning helps ensure devices like APs, cameras, and IP phones operate reliably.
• What cable types and connectivity options do you install (twisted pair, fibre, coax, 10 gig)?

  Common options include twisted pair copper (such as Cat 5e, Cat 6, and Cat 7) and fibre optic links for higher-capacity connectivity. Coax can be included where your use case requires it, and 10 gig-capable designs are supported through appropriate media selection.
• Are your technicians certified, and do you offer fault location and ongoing maintenance?

  We confirm the technician profile and any required manufacturer credentials for the accepted scope before assignment. Every project follows documented installation and testing practices; ongoing maintenance and fault-location support can be included in the agreed scope.
• Do you offer preventative IT maintenance in Alcalá de Henares for companies with an initial audit?

  Yes. We carry out an initial audit and inventory to identify risks and define an improvement plan. From there, we apply preventative maintenance with reviews focused on security, backups, and stability.
• What does maintenance include: security, backup copies, and support?

  It includes preventative reviews, layered security controls, vulnerability management, and verified backups. In addition, remote and on-site support is integrated depending on the type of incident.
• Do you provide remote IT support and repairs at home or in the workshop?

  Yes. We prioritise remote assistance. Each on-site intervention is confirmed according to location, available resource, timing, scope and access.
• Do you support data protection compliance (LOPD/GDPR) within maintenance?

  In business environments, maintenance should include security measures and access control that affect data protection. The audit reviews relevant aspects to reduce risks.
• How can I request a quote and what information do you need?

  To tailor the plan, we need details such as the number of devices, the environment type (office/servers), security requirements, and the urgency level. With that information, we suggest the most suitable option.
• What IT support services do you provide in Alcalá de Henares?

  We provide helpdesk and end-user support, device and server support, and network/security basics. We also include preventative maintenance to reduce downtime and repeat incidents.
• How fast do you respond to IT incidents?

  Remote support follows the agreed service model. Response objectives by priority and any local intervention in Alcalá de Henares are confirmed in the accepted SLA.
• Do you support remote and on-site work?

  Yes. The contract defines remote-support inclusions, and any local intervention is confirmed by location, resource, timing, scope and access.
• Can you tailor an IT Support plan for small businesses vs larger organisations?

  Yes. We adapt the contract to the number of devices and users, your required response time, and your budget. Options include hourly packages, monthly hour rates, and flat-rate models.
• How can I request a quote for IT Support in Alcala de Henares?

  Request a quote and share your device count, user count, current environment, and the level of support you need. We will prepare a plan aligned to your SLAs and security requirements.
• What’s included in a corporate network implementation to unify multiple sites?

  It includes architecture design (wired cabling and WiFi), routing and segmentation configuration, integration with IT, and access policies. It also covers testing, planned migration, and subsequent operations with monitoring and support.
• How is traffic prioritised for critical applications during demand peaks or remote work?

  A prioritisation strategy is defined based on traffic profiles and policies (for example, for voice, video calls or business systems). In addition, capacity and queuing are validated to prevent degradation during busy hours.
• What evidence and KPIs do you recommend to prove the network project’s success?

  Availability (uptime), performance (latency and packet loss), capacity (usage per segment), and reduction in incidents. Also include experience metrics (perceived response time) and SLA compliance.
• How much does resilience (backup links) influence operational continuity?

  It reduces the impact of failures and improves continuity during incidents. It is measured by failover times, recovery times and service stability during planned events or contingencies.
• What role does the partner (e.g., experience and ongoing support) play in adoption and ongoing operations?

  The partner defines the methodology, executes with risk control, and ensures operations through monitoring and maintenance. This accelerates adoption, reduces internal dependency, and sustains performance with SLA-based support.
• Do you offer IT maintenance for businesses with remote and on-site support in Leganés?

  We use remote support first. When site work is needed, location, resource, timing, scope and access are confirmed for each request before scheduling.
• Does the service include backups and data recovery in the event of failure or infection?

  It includes a backup strategy, backup management and recovery in case of failures or infections, plus monitoring to detect issues. It also covers testing and verification of the process.
• What’s the difference between preventive, corrective and proactive maintenance?

  Preventive maintenance reduces breakdowns through scheduled inspections, corrective maintenance kicks in when there is an incident, and proactive maintenance anticipates risks with monitoring, patches and security. The combination is usually the most efficient.
• Do you handle IT security (protection against viruses/hacking) and system status (updates)?

  Yes. We apply a layered defence: antivirus and protection on gateways/email, intrusion prevention, patch management and vulnerability control. We also ensure secure remote access.
• Can I sign up for a plan based on the number of devices and adjust the service if the company grows?

  Yes. Plans are tailored to the number of devices and the evolution of your business. You can scale the service to maintain the same level of support and continuity.
• What should be included in a corporate network implementation success case to convince stakeholders?

  Include corporate context, the problem statement, architecture and delivery phases, security validation evidence, and quantified outcomes. Finish with lessons learned and a replicable checklist so stakeholders can trust the approach.
• How do you choose between multi-vendor management and single-vendor approaches in a corporate network?

  Compare lock-in risk, operational complexity and integration effort. Multi-vendor can improve flexibility and best-of-breed security, while single-vendor can simplify support—choose based on your governance and skills.
• What security measures should be validated during and after implementation?

  Validate policy enforcement, threat mitigation controls, segmentation behaviour and secure management access. After go-live, confirm monitoring coverage, incident response readiness and uptime protection for critical services.
• How can organisations measure improvements like provisioning speed, latency and reduced downtime?

  Define baselines before the change, then track provisioning lead time, latency under load, uptime/availability and incident frequency. Use ticket trends and SLA adherence to show operational improvement.
• What is a realistic implementation roadmap from discovery and design to go-live for a corporate network rollout?

  Use a phased plan: discovery and requirements, design and security alignment, build and integration, migration and cutover, then validation and operational handover. Include stakeholder acceptance gates at each milestone.
• What’s included in an end-to-end IT security service for businesses?

  It includes attack-surface assessment, layered control design, deployment and configuration, operations with monitoring and incident management, and continuous improvement with periodic reviews.
• How do you decide which controls to prioritise: based on risk, cost or data criticality?

  You prioritise by combining data criticality, likelihood of attack and recovery capability. Cost is used to decide the implementation order without leaving critical gaps.
• What’s the difference between managing risks and doing IT security in a company?

  Risk management is the process of identifying, measuring and prioritising. IT security is the implementation of controls and day-to-day operations to reduce risk in practice.
• Is antivirus and occasional scanning sufficient for a company with cloud and endpoints?

  No. In environments with cloud and multiple endpoints, continuous monitoring, access control, vulnerability management, and incident response are required to detect and contain issues more quickly.
• How often should backups and penetration tests be carried out?

  Backups should be aligned with the level of business change and tested via restores. Penetration tests are scheduled based on criticality, relevant changes, and vulnerability findings.
• What should be included in an IT Support contract for a business?

  A solid contract should define scope (helpdesk, remote support, on-site repairs), response times, escalation steps, reporting, and security responsibilities. It should also clarify what is included vs billed separately.
• Do you offer remote IT support, on-site support, or both?

  Most businesses benefit from both. Remote IT support resolves day-to-day issues quickly, while on-site support handles hardware failures, urgent server breakdowns, and tasks that cannot be completed remotely.
• What response time can we expect for urgent incidents in Leganés?

  Providers typically differentiate urgent incidents from standard tickets. Ask for explicit targets (for example, a fast on-site window for critical breakdowns) and how the clock starts (ticket registration time).
• Do you provide proactive monitoring and regular preventive maintenance visits?

  Proactive monitoring and preventive checks help reduce repeat incidents and security exposure. Confirm whether monitoring is continuous, what is reviewed, and whether preventive visits are included or scheduled.
• Can you offer a flat-rate managed support plan without long-term commitment?

  Some providers offer flat-rate or monthly packages with flexible terms. Request a clear description of included hours, coverage limits, and contract duration options so you can plan costs confidently.
• What are the first IT security steps my business should implement to reduce ransomware risk?

  Start with identity hardening (MFA for key accounts), patch governance for exposed systems, and backups with restore testing. Then add endpoint protection and secure network access so attackers cannot move laterally easily.
• Do we need MFA for everyone, and how should it be enforced and audited?

  MFA should cover all users, with stronger enforcement for administrators and privileged accounts. Audit by reviewing sign-in logs, MFA coverage reports, and exceptions, then remove weak methods where possible.
• How often should we patch, and how do we prioritise which vulnerabilities to fix first?

  Patch on a defined cadence, but prioritise based on exposure and exploitability (internet-facing systems first, then critical business services). Use vulnerability tracking and risk scoring to decide what goes into the next patch window.
• What should an incident response plan include, and how do we test it before an incident?

  Include roles, escalation paths, evidence handling, containment steps, and communication/breach notification readiness. Test with tabletop exercises and follow up with improvements to procedures and technical controls.
• How should we verify that backups are usable (including restores) rather than just scheduled?

  Run restore tests on a schedule that matches your risk (at least periodically) and document success criteria. Validate both recovery time objectives and that backups are protected from common ransomware behaviours.
• What exactly does the CPD and communications rack mounting service include?

  It includes site planning, mechanical rack installation, structured cabling, cable management, integration with power and air conditioning, and commissioning with link verification. Documents and acceptance criteria for operation and maintenance are also provided.
• Do you work with existing infrastructure or only new installations?

  It is possible to work on existing infrastructure, as long as the condition of power, pathways/routing, ventilation, and component compatibility is assessed. The goal is to minimise unnecessary changes and ensure that the installation does not compromise performance or security.
• How do you ensure safety and good performance during commissioning?

  We apply best practices for assembly and cable management, verify connections using test equipment, and validate operation to ensure operational continuity. We also take care of thermal management and electrical distribution to prevent degradation.
• Do you offer ongoing support and maintenance after installation?

  Yes. It includes periodic inspections, updates to documentation, and incident response to prevent minor issues from turning into costly downtime. The approach is proactive to sustain performance throughout the lifecycle.
• What is the difference between continuous and ad-hoc IT maintenance in Valencia?

  Continuous maintenance covers periodic reviews and support to reduce incidents and maintain continuity. Ad-hoc maintenance is contracted to handle specific needs or particular incidents, with a more limited scope.
• Does the service include remote support, and what cases can be resolved without onsite travel?

  It normally includes remote access for diagnosis, configuration, fault correction, and end-user support. Many software, permissions, email, performance, and security issues are resolved without any onsite travel.
• What exactly does a security audit and monitoring cover?

  It includes a review of protection status, system configuration, access policies, backups, and risk evidence. Gaps are identified and preventive actions are proposed with follow-up.
• How quickly can a technician come to your home or office in Valencia?

  It depends on criticality and the type of equipment, and is defined in the service agreement. In managed environments, attention is prioritised according to impact to minimise downtime.
• Do you manage WiFi networks and cabling, and also data systems/centralisation?

  Yes, maintenance can cover WiFi networks, cabling and fibre, as well as data administration and centralisation depending on the client’s design. The scope is defined after the initial audit.