Services
Defined scope. Documented delivery. The following describes what is actually performed — not a list of capabilities.
Managed Business Services
Engagements cover the deployment, hardening, and ongoing management of RHEL, Fedora, or Ubuntu workstation and server environments (equipment provided by HawkData), network infrastructure, identity and access controls, and backup operations for small and medium-sized businesses. All work is scoped and documented before it begins. Any work outside the agreed scope requires a written change request before execution.
Workstation Deployment and Hardening
- OS selected from RHEL, Fedora, or Ubuntu depending on workload and support requirements — all equipment is provided by HawkData
- Baseline configuration applied: unnecessary services disabled, firewall enabled, automatic updates configured
- User accounts created with least-privilege by default; administrative access separated
- Disk encryption configured where hardware supports it
- Endpoint agent deployed (EDR/monitoring, as per engagement scope)
Identity and Access Management
- Centralized directory configured (RHEL IdM, or SSO-compatible solution on Ubuntu/Fedora, depending on environment size)
- Role-based access documented and enforced
- Password vault deployed for team credential management
- Administrative account separation enforced — no shared admin credentials
Network Design and Segmentation
- Office, server, and guest networks segmented at the firewall level
- VLAN design documented with rationale
- NGFW rules documented; change control process established
- Routing policies reviewed for least-exposure principles
VPN Provisioning and Management
- Client-to-site VPN configured for remote users (full-tunnel or split-tunnel, documented per policy)
- Site-to-site VPN configured where multiple locations require interconnection
- Authentication policy defined (MFA enforced where operationally feasible)
- VPN access is logged; session policies documented
Backup and Continuity Planning
- RPO and RTO targets defined with the client before implementation
- Backup schedule, retention, and storage location documented
- Restore procedures tested and recorded
- Backup integrity monitoring configured
What Is Not Included
The following are outside the scope of standard managed service engagements. They are available as separately scoped and priced work.
- Web or application hosting
- Software development or scripting beyond basic automation
- Third-party SaaS onboarding or licensing management
- Compliance certification, audits, or formal risk assessments
Prerequisites and Assumptions
- Business engagements assume physical security for all systems provided by HawkData
- Clients are expected to respond to documented change requests within agreed timeframes
- Open-source office tooling (LibreOffice) is the default; proprietary alternatives require separate justification and may carry additional licensing costs
