Managed Services

What it is

This is the offering with the most loaded name. We're not here to take over your IT department or sign you to a multi-year managed contract. We help your institution manage its services better — whether the day-to-day stays internal, stays with your current providers, or moves elsewhere. We're the practitioner team that comes in, gets the operating model right, builds your team up, and steps back. If you need a backstop later, we're ready. You don't need our products to use any of it.

Higher-Ed Managed Services: An Alliance Model, Not an MSSP

Higher-education managed services from a generic MSSP usually means alert fatigue and vendor capture. Our model is different: we don't run your services, we help your team run them better — calibrating specialty providers (managed SOC, managed EDR, managed IAM) to higher-ed reality and owning the operating-model design without owning the operation.

The distinction we draw — the most important one on this site

Most “managed services” pitches in this market are vendor-capture plays — the longer the institution stays, the more dependent it becomes. Our model is the opposite. The outcome we aim for is an institution that operates its services well, owns its vendor relationships, and is more self-sufficient when our engagement ends than when it started. If you want us to backstop something ongoing afterward, we're available — but it should be your choice from a position of capability, not dependency.

How prospects describe the pain

• “We bought Splunk but nobody watches it after 5pm.”
• “Our managed SOC keeps escalating things we don't care about and missing things we do.”
• “I have five specialty vendors and no time to manage any of them.”
• “My team is buried under tier-1 alerts they should be automating away.”
• “We outsourced [X] three years ago and we're worse at it now, not better.”
• “Every MSSP pitch we hear is a takeover.”

The pragmatic pieces we deliver

• Service operations audit of your current managed providers — are they delivering the outcomes you're paying for, calibrated to higher-ed?
• Operating-model design — what should be in-house, what should be brokered, what should be SaaS — recommended for your institution, not for our bookings.
• Runbook and playbook development so your internal team can pick up more in-house when that's the right answer.
• GLBA service-provider oversight scaffolding — institution-owned, audit-ready, kept current — yours, not ours.
• Vendor-management coaching for institutions that want to keep external providers but run those relationships better — quarterly reviews, SLO definition, performance docs that auditors will recognize.
• Surge backstop — hourly retainer for DFIR support, incident comms help, or specialty bursts when your team needs reinforcements.
• Tool-portfolio rationalization — including the uncomfortable answer “you're paying for three things that do the same job; pick one.”
• Capability transition support when an institution is moving a service from external to internal (or vice versa) — the messy middle where stuff usually breaks.

What “frictionless” means here

Your team grows more capable over time, not more dependent on us. Vendor relationships are your relationships; we help you run them. When the engagement ends, the institution is more self-sufficient than when it started. The backstop is available but never the default. None of this requires you to adopt Azimuth, ACRE, or Hekate— we'll work with whatever stack you already have.

Frameworks and references we use

GLBA Safeguards Rule service-provider oversight requirements (institution-owned obligation, audit-relevant), ITIL 4 supplier management, EDUCAUSE service-operations maturity benchmarks, higher-ed peer comparisons for in-house vs. outsourced service mix. Where relevant: Internet2 NET+ consortium pricing, REN-ISAC threat intel for tuning, HECVAT (run via Azimuth) for your vendor selection.

Engagement shape

4–6 week service-operations audit + operating-model design → 8–12 week operational- uplift sprint focused on building capability around specific services → optional ongoing coaching (monthly cadence) or surge backstop (hourly retainer). Engagements have natural off-ramps; you can stop at any phase.