Frequently Asked Questions

Enterprise Cloud Solutions Group LLC (ECSG) is a Managed Service Provider (MSP) headquartered in Norwalk, Connecticut, specializing in enterprise-grade technology solutions for small and medium-sized businesses (SMBs) across the United States.

Our services include Microsoft 365, Azure Cloud, Cybersecurity, Managed IT, vCIO Consulting, Web Design, Camera Installation, Network Infrastructure and Structured Cabling.

ECSG operates exclusively in the United States market, with headquarters in Norwalk, Connecticut. We serve SMBs (10–50 users) primarily across Fairfield County, CT and the greater New York City metro area, with the ability to support clients throughout the country through our remote-first service model.

We offer bilingual support (English and Spanish) to ensure every U.S.-based client — regardless of their team's preferred language — gets clear, reliable technology guidance.

ECSG guarantees 99.9% uptime on managed services under an SLA (Service Level Agreement) contract. This means your infrastructure will be available virtually at all times, with contractually defined response times.

We also guarantee zero-downtime migration, 24/7 support and Spanish-language assistance for all our clients.

An SLA (Service Level Agreement) is a formal contract between ECSG and the client that defines service metrics such as availability, response times, incident resolution times and penalties for non-compliance.

Yes. ECSG is specifically designed to serve SMBs (small and medium-sized businesses) that need enterprise-grade technology without the cost of an in-house IT department. We serve companies from 5 employees up to organizations with hundreds of users.

MFA (Multi-Factor Authentication) is a security method that requires two or more forms of verification to access an account — in addition to the password, a second factor is required such as a code sent to the phone or an authenticator app.

It is critical because 99.9% of account compromise attacks are blocked when MFA is enabled, according to Microsoft data. A password alone is no longer sufficient protection.

SharePoint is Microsoft 365's content management and collaboration platform. It acts as your company's corporate intranet, allowing you to centralize documents, policies, announcements and resources in a single place accessible to the entire team.

Key benefits: elimination of duplicate document versions, department-level access control, automated approval workflows, integration with Teams and Office, and access from any device.

Microsoft Intune is the Mobile Device Management (MDM) and Mobile Application Management (MAM) solution included in Microsoft 365 Business Premium and Enterprise plans.

It allows IT administrators to: control which devices access corporate data, enforce security policies on smartphones, tablets and PCs, remotely wipe lost or stolen devices, and manage corporate applications centrally.

Every Microsoft 365 implementation with ECSG includes personalized training for the team: training sessions on Teams, Outlook, SharePoint and OneDrive; user guides tailored to your company's processes; bilingual documentation; and post-implementation support for team questions.

We also offer continuous adoption programs and advanced training as additional services.

Yes. Microsoft 365 stores U.S. tenant data in Microsoft's U.S.-based data center regions and complies with major frameworks used by American businesses, including HIPAA, PCI DSS, SOC 2, ISO 27001 and FedRAMP (for eligible government workloads).

ECSG configures Microsoft 365 tenants specifically for U.S. compliance needs — setting the correct data residency region, retention policies and audit logging so your company meets the regulatory requirements of your industry.

Microsoft Azure is Microsoft's cloud computing platform, one of the largest in the world alongside AWS and Google Cloud. It offers over 200 cloud services that allow businesses to build, deploy and manage applications and technology infrastructure without needing physical servers of their own.

With Azure, your company can have virtual servers, databases, networking, storage, security and data analytics available globally, paying only for what you use.

Azure Backup is Microsoft's cloud backup service that protects data from servers, VMs, databases, files and workloads (SQL Server, SAP HANA, etc.).

It is critical because it guarantees disaster recovery from ransomware, hardware failure, accidental deletion or natural disasters. Backups are stored AES-256 encrypted in geographically distributed data centers.

Microsoft Entra ID (formerly Azure Active Directory) is Microsoft's cloud identity and access management service. It acts as your company's "central directory" in the cloud.

It enables: Single Sign-On (SSO) for all Microsoft 365 and third-party apps, centralized user and group management, conditional access policies, and multi-factor authentication (MFA). It is the security foundation of the entire Microsoft ecosystem.

Azure Firewall is a managed cloud network security service that protects Azure resources from external threats. Unlike traditional physical firewalls, it is fully scalable with no hardware required.

It includes: rule-based network traffic filtering, Microsoft threat intelligence, TLS traffic inspection, integrated high availability and complete audit logs.

An Azure Virtual Network (VNet) is an isolated private network within Microsoft's infrastructure. It allows your Azure resources (VMs, databases, etc.) to communicate with each other securely, as if they were on a private corporate network.

It can be connected to your on-premise network via Site-to-Site VPN or ExpressRoute, creating a secure hybrid infrastructure.

Azure Monitor is Microsoft Azure's centralized monitoring and observability solution. It collects, analyzes and acts on telemetry from your cloud and on-premise resources.

It enables automatic alerts, real-time dashboards, anomaly detection and log analysis. ECSG configures Azure Monitor as part of the Managed IT service to detect and resolve issues before they affect your operations.

Azure DevOps is a set of services for managing the software development lifecycle (ALM). It includes: project boards (Boards), code repositories (Repos), CI/CD pipelines to automate deployments, automated testing and artifact management.

Ransomware is a type of malware that encrypts the victim's files and demands a ransom to unlock them. It is one of the most devastating attacks for businesses — 60% of SMBs that suffer one close within 6 months.

Phishing is a social engineering attack where cybercriminals impersonate legitimate entities (banks, Microsoft, well-known companies) to trick users into giving up credentials, financial information or installing malware.

A firewall is a network security system (hardware, software or cloud) that monitors and controls incoming and outgoing network traffic according to predefined security rules. It acts as the first line of defense for your corporate network.

Modern firewalls (NGFW — Next-Generation Firewall) go beyond basic filtering: they inspect packet content (DPI), identify applications, detect intrusions (IPS), filter URLs and apply advanced security policies.

Zero Trust is a security model based on the principle of "never trust, always verify." Unlike the traditional model that trusted everything inside the corporate network, Zero Trust assumes no user, device or application is trusted by default — even if inside the network.

The pillars of Zero Trust are: continuous identity verification (MFA), least privilege access, micro-network segmentation, continuous monitoring of all activities and encryption of all data in transit and at rest. ECSG implements Zero Trust using Microsoft 365 and Azure tools.

DLP (Data Loss Prevention) is a set of policies and technologies that prevent sensitive information from leaving the organization without authorization — whether by mistake, negligence or malicious intent.

Microsoft 365 includes built-in DLP that can detect credit card numbers, social security numbers, medical data and other sensitive information in emails, documents and Teams messages, and automatically block their unauthorized transmission.

A pentest (Penetration Test) is an ethical and controlled attack on an organization's systems to identify vulnerabilities before real attackers exploit them. A pentest evaluates: internal and perimeter network security, web application vulnerabilities, configuration security and personnel resistance to social engineering attacks.

SIEM (Security Information and Event Management) is a platform that centralizes, correlates and analyzes security logs and events from the entire IT infrastructure in real time to detect threats and respond to incidents. Microsoft offers Microsoft Sentinel, a cloud-native SIEM that uses artificial intelligence to detect attack patterns and automate responses.

EDR (Endpoint Detection and Response) continuously monitors laptops, desktops and servers for suspicious behavior, going far beyond traditional signature-based antivirus. XDR (Extended Detection and Response) correlates that endpoint data with signals from email, network and cloud sources for a fuller picture of an attack.

ECSG deploys SentinelOne across all managed endpoints. Its AI engine detects malicious behavior in real time and can automatically isolate an infected device and roll back files to their pre-attack state — often stopping ransomware before it spreads, with no manual intervention required.

A SOC (Security Operations Center) is a team and platform that watches your environment around the clock for signs of compromise. MDR (Managed Detection and Response) is the service model where that monitoring, investigation and response is delivered to you as a managed service, rather than built in-house.

ECSG partners with RocketCyber to provide 24/7 Managed SOC / MDR coverage — analysts review alerts around the clock, filter out noise and escalate only real threats, so your team isn't buried in false positives but is alerted immediately when something needs action.

Business Email Compromise (BEC) is a targeted attack where criminals impersonate an executive or vendor to trick employees into wiring money or sharing sensitive data — one of the costliest cybercrime categories for U.S. businesses.

ECSG layers Proofpoint email security (advanced anti-phishing, anti-malware, impersonation and BEC detection) with DefensX web/browser protection and recurring BullPhish ID phishing simulations, so threats are blocked technically and your team is trained to recognize what slips through.

An MSP (Managed Service Provider) is a company that proactively manages the IT infrastructure, systems and applications of its clients under a service contract. Unlike reactive IT support (break-fix), the MSP continuously monitors, maintains and optimizes your technology before problems impact your operations.

ECSG operates as a full MSP: it manages your Microsoft 365, Azure, security, networks, backups and devices, acting as your company's external IT department.

Active Directory (AD) is Microsoft's directory service that manages identities and resources on a corporate network. It is the central authentication and authorization system: it controls who can log in, what resources each user can access and what security policies apply to devices.

A BCP (Business Continuity Plan) is a strategic document that describes how an organization will continue operating during and after an unplanned disruption (system failure, natural disaster, cyberattack, pandemic). It includes the DRP (Disaster Recovery Plan), which details how to recover IT systems. Key metrics: RTO (Recovery Time Objective) and RPO (Recovery Point Objective).

RMM is the technology that allows MSPs to remotely monitor and manage their clients' devices and systems. ECSG runs Kaseya VSA as its core RMM platform, which lets us: see the health status of all your equipment in real time, detect issues before they fail, install patches and updates remotely, resolve incidents without on-site visits and generate automatic inventory and performance reports — all from a single pane of glass.

Virtualization allows running multiple operating systems (virtual machines) on a single physical server, making better use of hardware resources. Technologies like Hyper-V (Microsoft) or VMware vSphere are the most widely used platforms. Benefits: reduced hardware costs, greater flexibility, snapshots for backup and quick recovery, and the foundation for cloud migration.

A vCIO (Virtual Chief Information Officer) is an external technology director who acts as the CIO (IT Director) of a company without needing to hire a full-time executive. It is the ideal service for SMBs that need strategic technology leadership but cannot justify the cost of an internal CIO.

ECSG's vCIO becomes your trusted technology advisor: aligning technology with business objectives, planning IT investments, managing vendors and advising on strategic decisions.

A technology roadmap is a strategic plan that defines what technologies to implement, when and why, aligned with the company's growth objectives. It establishes investment priorities, implementation milestones and success metrics. ECSG's vCIO designs your company's technology roadmap to ensure each IT investment generates measurable business value.

Digital transformation is the process of integrating digital technology into all areas of a business, fundamentally changing how it operates and delivers value to its customers. It is not just about adopting new technology — it is about redesigning processes, culture and business models with technology as the enabler.

Technology ROI (Return on Investment) measures the financial return on IT investments. To calculate it: (Benefit obtained – Investment cost) / Investment cost × 100. Technology benefits include: operational cost reduction (typically 40% with ECSG), productivity increases, reduced downtime losses, avoiding security incident costs and enabling new revenue.

Structured cabling is a standardized telecommunications cabling system that supports multiple services (voice, data, video) within a building or campus. Unlike ad-hoc cabling, structured cabling follows international standards that guarantee performance, scalability and ease of maintenance.

A VLAN (Virtual Local Area Network) is a logical segmentation of the network that allows creating separate virtual networks within the same physical infrastructure. Devices on different VLANs cannot communicate with each other without passing through a router or firewall.

Common use cases: separating employee networks from guest Wi-Fi, isolating security systems (cameras, access control), separating servers from workstations and meeting PCI DSS and ISO 27001 segmentation requirements.

PoE (Power over Ethernet) is a technology that allows transmitting electrical power through the network cable along with data, eliminating the need for separate power supplies for end devices. Standards: IEEE 802.3af (15.4W), IEEE 802.3at/PoE+ (30W), IEEE 802.3bt/PoE++ (60-90W). PoE-powered devices: IP cameras, VoIP phones, Wi-Fi access points, IoT sensors and access control readers.

SD-WAN (Software-Defined Wide Area Network) is a technology that intelligently virtualizes and manages WAN connections (internet, MPLS, LTE) for a multi-site company. It enables prioritizing critical traffic, automatic failover between connections and cost reduction compared to traditional MPLS.

A rack (or telecommunications cabinet) is the standard 19" structure that organizes and houses network equipment, servers and telecommunications systems. Its capacity is measured in rack units (U), where 1U = 44.45mm in height. A well-organized data room includes: rack with cable management, labeled patch panel, switches, firewall, UPS (power backup), adequate thermal management and controlled access. ECSG designs and installs data rooms following the TIA-942 standard.

Analog CCTV (DVR): uses coaxial cable to transmit analog video signal to a DVR (Digital Video Recorder). More limited resolutions (up to 5MP in TVI/AHD), separate network cabling, less flexibility for remote access and scalability.

IP (NVR): uses network cable (Cat6) to transmit digitized video to an NVR (Network Video Recorder). Superior resolutions (4K, 8MP), integration with corporate network, native remote access, AI analytics and greater scalability. ECSG recommends and designs IP systems for new installations.

An NVR (Network Video Recorder) is the central device that receives, records and manages video from IP cameras. It includes high-capacity hard drives (optimized for continuous recording) and Video Management Software (VMS). Storage needs depend on: number of cameras, recording resolution, frames per second (fps), retention period (days) and compression type (H.264, H.265, H.265+). H.265+ can reduce storage by up to 70% compared to H.264.

Yes. All IP systems installed by ECSG include remote access from any internet-connected device: smartphone (iOS/Android), tablet or computer. ECSG configures remote access securely — never exposing the NVR directly to the internet, but through the manufacturer's cloud services or VPN.

IVA (Intelligent Video Analytics) is the ability of modern cameras and NVRs to analyze video content in real time using artificial intelligence to detect specific events without human intervention. Available functions: perimeter intrusion detection, virtual line crossing, abandoned/removed object detection, people counting, license plate recognition (LPR), facial detection, behavior analytics and heat maps.