Incident Response Plan for Small Business Guide
Build an incident response plan for small business with practical response steps, playbooks, communication guidance, rec
On-Site Technology serves businesses with 10 to 500 users across NJ, NY, PA, and South Florida, with national delivery for cloud, Microsoft 365, and cybersecurity. Headquartered in Clifton, NJ.
Family-owned, founder-led since day one. Same Lou Garcia who started it.
Built for 10 to 500 users. Past solo IT, before enterprise overhead.
24×7 monitoring across endpoints, identities, and cloud workloads.
Most managed-service tickets see an engineer within 5 to 15 minutes.
On-Site Technology is a family-owned managed IT services provider headquartered in Clifton, New Jersey, with a second office in Ft. Lauderdale, Florida. We deliver managed IT, cybersecurity, Microsoft 365, Copilot, cloud infrastructure, VoIP phone systems, data backup, and business continuity to businesses with 10 to 500 users. Since 2001, we have supported businesses through Microsoft 365 migrations, office moves, ransomware recoveries, and compliance audits aligned to NIST CSF 2.0, CMMC 2.0, HIPAA, and PCI DSS 4.0.
Built for the 10 to 500 user range. Each one stands on its own. Most clients combine three or four.
One incident, start to finish, with what our engineers are looking at each step of the way. This one is an illustrative example, not live client data.
Saturday night. The risk signal on one Microsoft 365 account.
Keep scrolling
1 of 4
Microsoft 365 reports a sign-in to Dana’s mailbox from a country she has never worked in, on a PC nobody recognizes. Identity monitoring raises it the moment it scores as high risk.
Raised by identity monitoring
three prompts is fatigue, not Dana
2 of 4
An analyst pulls her sign-in history and recent mailbox changes. A new inbox rule is quietly forwarding anything about invoices to an outside address. That settles it: a takeover, not a business trip.
Reviewed by a SOC analyst
If the subject contains invoice or payment, forward it to an outside address, then delete it.
Compromised
attacker sets up auto-redirect of payments
3 of 4
Every active session is signed out, the password is reset and MFA is enrolled again, so the stolen login stops working everywhere at once. Then the forwarding rule comes out.
Locked down by Andy M., Security Specialist
shut the door first, ask questions after
4 of 4
Dana signs back in on her own laptop. You get a plain-English summary of what happened, what was touched and what we changed so it is harder to do again.
Closed out by Maria L., your account engineer
Resolved
Dana’s back in Monday morning.
Ransomware on a workstation and a lost laptop follow the same path: spot it, check it, lock it down, get people working again.
Family-owned, founder-led, and built specifically for the 10 to 500 user range.
Family-owned and founder-led. Lou Garcia built On-Site Technology in 2001 and still runs it.
Built for the 10 to 500 user range. Past one-IT-person, before enterprise overhead.
Operational depth. 24×7 monitoring across endpoints, identities, and cloud workloads.
Real engineers, not a queue. Most managed-service tickets see an engineer within 5 to 15 minutes.
Two offices, four states of regional dispatch, and national delivery for cloud, Microsoft 365, and cybersecurity.
Five questions about who we are. For service-specific questions, each service page has its own FAQ.
On-Site Technology is a family-owned managed IT services provider headquartered in Clifton, New Jersey, with a second office in Ft. Lauderdale, Florida. We deliver managed IT, cybersecurity, Microsoft 365, Copilot, cloud infrastructure, VoIP phone systems, data backup, and business continuity to businesses with 10 to 500 users. We serve clients regionally across NJ, NY, PA, and South Florida, with national delivery for cloud, Microsoft 365, and cybersecurity engagements.
On-Site Technology was founded in 2001 by Lou Garcia and has been serving businesses for over 25 years. Since 2001, we have supported businesses through Microsoft 365 migrations, office moves, ransomware recoveries, and compliance audits. We are still family-owned and founder-led.
We are built for businesses with 10 to 500 users. That sweet spot covers small businesses past the one-IT-person stage and mid-market organizations that need senior engineering depth without enterprise overhead. We currently serve 300+ businesses in this range across our four-state regional footprint.
Our regional engineering footprint is New Jersey, New York, Pennsylvania, and South Florida, dispatched from our Clifton, NJ headquarters and Ft. Lauderdale, FL office. For cloud, Microsoft 365, Copilot, and cybersecurity engagements that do not require on-site work, we deliver nationally across the United States.
Getting started typically takes four steps. First, we run a free IT assessment to scope your environment, users, and current pain points. Second, we put together a written proposal with tier and pricing options. Third, we onboard your environment with documentation, monitoring agents, and security baselines. Fourth, we run your IT day-to-day with a named senior engineer and quarterly business reviews. Most clients are fully onboarded within 30 to 60 days.
On-Site Technology offers tiered managed IT pricing (Basic, Standard, Premium) typically billed per user per month, plus add-ons for managed cybersecurity, CMMC compliance, backup and continuity, VoIP, and Microsoft 365. Co-managed engagements and project work (Microsoft 365 migrations, office moves, structured cabling, security camera installs, drone services) are scoped separately. Use our free IT cost calculator for an instant ballpark, or request a written proposal scoped to your user count, environment, and security requirements.
On-Site Technology has been family-owned and founder-led since 2001, with founder Lou Garcia still running the company day-to-day. We assign a named senior engineer to every account, not a first-line call queue. We are built specifically for the 10 to 500 user range, so you get enterprise-grade Microsoft 365 expertise, cybersecurity tooling, and CMMC readiness at small-business pricing, without being forced onto a one-size-fits-all platform. Our regional presence in New Jersey, New York, Pennsylvania, and South Florida lets us dispatch engineers physically; cloud, Microsoft 365, and cybersecurity work is delivered nationally.
On-Site Technology supports HIPAA-regulated healthcare clients, SOC 2-aligned engagements, and CMMC compliance readiness for defense industrial base contractors. We provide the security baselines, documentation, monitoring, and policies your auditors expect. Our managed cybersecurity stack includes SentinelOne EDR, DUO MFA, firewall management, dark web monitoring, and 24×7 SOC coverage. We do not issue compliance certifications ourselves (an auditor does), but we ensure you are technically and procedurally ready when the audit happens, and we maintain the evidence trail your auditor will request.
Yes — that is our co-managed IT services engagement model. We act as an extension of your in-house team, providing senior engineering depth, 24×7 SOC monitoring, advanced security tooling, vendor escalation, project capacity, after-hours coverage, and Microsoft 365 expertise that a small in-house team cannot deliver alone. Co-managed engagements are common for businesses with one to three internal IT staff who need to fill specific gaps (cybersecurity, cloud, M365, after-hours) without losing direct ownership of daily helpdesk and end-user support.
Our Security Operations Center monitors client environments 24×7 for security events, system outages, and patch failures. Most managed-service helpdesk tickets typically see an engineer within 5 to 15 minutes during business hours (Monday through Friday, 7:30 AM to 6 PM Eastern). Business-hours help desk coverage is standard, and 24×7 coverage is available as an option. Critical SOC alerts (suspected ransomware, account compromise, mass outage) target a faster engineer-on-bridge response. Exact response targets are documented in your service agreement and reviewed during quarterly business reviews.
Industry analysis, pricing notices, and announcements from the team at On-Site Technology.
Build an incident response plan for small business with practical response steps, playbooks, communication guidance, rec
Compare EDR vs MDR, understand monitoring and response responsibilities, and decide which cybersecurity approach fits yo
Assess azure virtual desktop for small business with costs, benefits, AVD vs Windows 365, and a secure pilot plan before
Microsoft 365 backup for business explains what Microsoft protects, how retention differs from backup, and how to plan a
In July 2026, ransomware attackers pulled cloud storage keys from a manufacturer's backup server and deleted two offsite
Get a practical guide to microsoft intune for small business, including device setup, ownership choices, app protection,
Tell us about your environment and current pain points. A senior engineer will respond, typically within one business day, with a scoped path forward. No obligation, no resale of your information.
Call us directly(973) 777-7227