Securing and Hardening Your On-premises IT Environment — SCCM Security Implementation

IT Partner’s Securing and Hardening Your On-premises IT Environment service includes analysis of your on-premises IT infrastructure and application of security best practices to systems, devices, administrative access, endpoints, storage, operating systems, firewall and network settings, and update policies. The engagement also includes verification of changes and a project closeout report documenting final status, evidence of meeting acceptance criteria, outstanding issues, and final budget.

The main outcome is a more secure on-premises environment in accordance with best practices. IT Partner achieves this by reviewing the existing infrastructure, applying agreed security improvements, verifying the changes, and documenting the final project status.

The stated duration for IT Partner’s Securing and Hardening Your On-premises IT Environment service is 1 week. The actual plan may vary depending on your needs, so any environment-specific scheduling details should be confirmed with IT Partner during scoping or kickoff.

IT Partner’s Securing and Hardening Your On-premises IT Environment service is priced at $90 per hour. The service SKU is ITPWW150IMPOT, and the listed service duration is 1 week.

The engagement starts with a kickoff meeting, followed by an on-premises health check, the start of the securing process, verification of changes, finalization of changes, and any post-assessment tasks. This sequence helps IT Partner understand the current environment, apply hardening measures, and confirm the work before closeout.

IT Partner reviews and hardens areas such as administrative access, endpoint access, virtual disks and disk storage, operating systems, firewall and network settings, and update policies. The service also includes practices such as using Privileged Access Workstations, using Multi-Factor Authentication, and limiting or constraining administrative access where appropriate.

No, migration and deployment are specifically not included in this service. The engagement is focused on securing and hardening the existing on-premises IT environment rather than moving workloads or deploying new infrastructure.

The customer must provide a dedicated point of contact to work with IT Partner and coordinate any outside vendor resources and schedules. The customer is also responsible for configuring networking equipment such as load balancers, routers, firewalls, and switches, and for providing remote and/or physical access to required facilities, servers, systems, and services.

IT Partner is responsible for analyzing the IT infrastructure and applying security best practices across areas such as privileged access, MFA, administrative access constraints, endpoint access, storage encryption, operating system management, firewall and network settings, and update policy and software review. IT Partner also verifies changes and provides a project closeout report.

The client is responsible for assigning a dedicated point of contact, coordinating any outside vendors, configuring required networking equipment, and providing access to physical and virtual servers, systems, services, and facilities. These responsibilities matter because IT Partner needs timely access and coordination to complete the hardening work within the planned engagement.

The service description does not specify whether downtime is required. Because security changes to firewalls, operating systems, endpoint access, administrative access, storage, or update policies can affect operations, downtime expectations and maintenance windows should be confirmed with IT Partner during kickoff and planning.

The client is responsible for configuring networking equipment such as load balancers, routers, firewalls, and switches. IT Partner’s scope includes firewall and network settings as part of the security hardening review, but any exact division of hands-on configuration work should be confirmed with IT Partner before the engagement begins.

Yes, the service scope includes using Multi-Factor Authentication and Privileged Access Workstations as part of security best practices. It also includes limiting and constraining administrative access to reduce risk in the on-premises environment.

Yes, IT Partner’s responsibilities include controlling and limiting endpoint access and encrypting virtual disks and disk storage. These activities are part of the broader hardening effort to improve the security posture of the existing on-premises environment.

Yes, the service includes update policy and software review. IT Partner also addresses operating system management as part of the on-premises hardening effort.

The deliverables are a more secure on-premises environment in accordance with best practices and a project closeout report. The closeout report includes final project status, evidence of meeting acceptance criteria, any outstanding issues, and the final budget.

The service states that the closeout report includes evidence of meeting acceptance criteria, but it does not define specific measurable acceptance criteria in the provided scope. Customers should confirm the exact acceptance criteria with IT Partner during kickoff or project planning.

Yes, the service notes that security requirements can vary for different types of workloads and that the plan may vary depending on customer needs. IT Partner’s recommendations should therefore be confirmed against the specific systems, workloads, and risks in the customer’s on-premises environment.

The included documentation is the project closeout report showing final project status, evidence of meeting acceptance criteria, outstanding issues, and final budget. More extensive documentation can be provided for an additional fee.

The service manager listed for Securing and Hardening Your On-premises IT Environment is Mike Mackey. The service is classified under the SCCM product taxonomy as an Implementation service, with SKU ITPWW150IMPOT.