Phoenixtekk

Before IT SaaS became what it is today, I spent a significant part of my enterprise work helping organizations adopt real, enforceable security baselines — including the full CIS Benchmarks implementation at Dexcom.
That project wasn't a “push some configs” exercise.
It was a full compliance and engineering initiative, including:
• Mapping CIS Controls → OS capabilities
• Designing a repeatable baseline for Windows & macOS
• Validating enforcement through real-world device telemetry
• Eliminating configuration drift
• Aligning SOC, IT, and engineering teams under one standardized posture
• Building automated reporting to prove that devices stayed compliant
And now, the same approach is part of the IT SaaS service model.

🛡️ How I Help Organizations Implement CIS Today
Windows (CIS Level 1 & Level 2) via Intune
Using Microsoft Intune, I help organizations:
• Convert CIS requirements into Configuration Profiles & Settings Catalog policies
• Align Defender, BitLocker, Firewall, and Device Control with CIS recommendations
• Deploy secure baselines without breaking user productivity
• Validate enforcement via compliance policies and reporting
• Implement ongoing drift detection using Graph API & automation
• Produce documentation that auditors and security teams trust
This is not generic hardening.
This is structured, benchmark-aligned configuration with provable outcomes.

macOS (CIS Level 1 & Level 2) via Jamf Pro
For macOS fleets, I leverage Jamf Pro to:
• Map CIS macOS requirements into MDM profiles, scripts, and enforcement rules
• Configure FileVault, firewall, system preferences, and privacy controls
• Lock down system behaviors in a standards-compliant but user-friendly way
• Automate remediation and provide real-time compliance insights
• Generate reporting for internal and external auditors
Windows and macOS get equal security engineering — not two separate worlds.

⭐

Most small businesses are running on default settings

Default security.
Default permissions.
Default sharing.
Default device policies.
Default alerting.

Default feels safe.

But default was designed for:

Millions of users.
Unknown environments.
Lowest-friction onboarding.

Not for your business.
Default settings are generic.
Your business is not.
When no one intentionally configures your environment:

• Access expands quietly
• Permissions drift
• Sharing spreads
• Policies never evolve
• Devices remain unmanaged

Nothing looks broken.
Until it is.
IT Support as a Service doesn’t just fix issues.
It
https://www.phoenixtekk.com/it-saas-modern-it-support-for-entrepreneurs-small-teams/

Here’s a quiet risk most small businesses ignore:
One person “just knows how everything works.”

They know:
• The admin passwords
• The shared drive structure
• The integrations
• The billing accounts
• The device setup process
• The workarounds

It works…

Until they’re unavailable.

Vacation.
Sick leave.
Resignation.
Burnout.

Now no one knows:

• Who has admin access
• How systems are connected
• What automations are running
• What security policies exist
• What would break if changed

That’s not IT.

That’s dependency.

IT Support as a Service isn’t just about fixing problems.

It creates:
• Documentation
• Visibility
• Standardization
• Backup ownership
• Transferable structure

A business shouldn’t depend on one person’s memory.

It
https://www.phoenixtekk.com/it-saas-modern-it-support-for-entrepreneurs-small-teams/

Most small businesses feel stable…
Until they add one more person.

The 3rd employee works fine.
The 5th exposes cracks.
The 7th reveals structural problems.

Suddenly:

• Permissions are inconsistent
• Shared drives are messy
• Devices aren’t standardized
• Onboarding takes too long
• Offboarding feels risky
• No one is sure who has access to what

Growth doesn’t just add revenue.
It adds complexity.
And complexity exposes weak foundations.
IT Support as a Service isn’t just about fixing issues.
It’s about building structure that holds when you grow.
Because scaling without structure doesn’t feel like growth.
https://www.phoenixtekk.com/it-saas-modern-it-support-for-entrepreneurs-small-teams/