Co-Managed IT & Cyber Security Services

Choose the support your team needs

Co-managed IT is modular. You may need first-line support, advanced technical escalation, a security programme or a combination of services. We agree the responsibilities Cloud Agile will take on and the work your internal team or existing providers retain.

There is no fixed customer-size limit. We agree the work, systems, responsibilities and service coverage around your organisation.

Patching and system maintenance

Manage the agreed operating-system and application patching scope, deployment rings, maintenance windows, testing, failures and exceptions. Asset coverage, supported platforms, reboot approval and emergency-change authority are defined before operation.

Vulnerability management

Review authorised vulnerability findings, validate the technical context and prioritise remediation with your team. Deliver agreed fixes and track exceptions, evidence and rechecks. Active testing requires its own authorisation and scope.

First-line support

Provide an agreed first contact for users, with request handling, initial diagnosis, resolution and escalation. Channels, hours, knowledge access and responsibilities are set around your existing support model.

Third-line engineering and escalation

Add senior technical capability for complex issues, infrastructure, identity, cloud and approved changes. We identify who owns second-line work and application or vendor escalation where relevant.

Hardware acquisition and lifecycle

Support sourcing, standards, acquisition, asset records, deployment planning and lifecycle decisions. Supply territories, lead times, warranties, customs and onsite deployment are agreed where relevant.

Security controls and products

Select, implement and manage agreed technologies covering identity and MFA, endpoint detection and protection, email and web controls, cloud configuration, security awareness and other controls required for the defined scope.

SOC and managed detection/response

Our SOC provider is Adlumin (N-able). Security operations centre and managed detection/response capabilities are agreed for each engagement. Monitoring scope, alert triage, human response, escalation and client incident-command responsibilities are stated explicitly; 24/7 coverage is not assumed.

Compliance control implementation and evidence

Implement agreed IT controls and maintain technical evidence where included. We work alongside your HR, DPO, legal and compliance specialists, who retain their assessments and decisions.

Agree ownership before operating the service

Co-managed delivery works best when the boundaries are visible. We agree who administers each system, who approves changes, who responds to alerts, who communicates incidents and who maintains control evidence.

The responsibility schedule covers your internal team, Cloud Agile and any existing providers. It includes access, authorisation, escalation, service windows, dependencies and review points. It is updated when the service changes.

Support that connects operations to assurance

Technical delivery and governance should use the same view of priorities. Remediation work can feed the risk register; completed changes can provide control evidence; recurring reviews can show leadership where decisions or investment are needed.

Related engagements such as cyber security, governance, risk and compliance (GRC), ISO 27001, risk assessments and strategic IT advice are scoped separately where they are needed.

A clear onboarding and review process

An engagement can begin with a focused assessment or delivery project and develop into ongoing co-managed support.

• Understand the team, systems, existing providers and desired responsibilities.
• Review the agreed technical scope, dependencies and available records.
• Define modules, coverage, authority, escalation and acceptance criteria.
• Complete agreed access, tooling, documentation and transition work.
• Operate the service, report exceptions and review the improvement roadmap.

International co-managed delivery

Remote co-managed work is scoped around the countries, entities, time zones and systems involved. We confirm coverage, access arrangements, information handling and any local or onsite dependencies. Monitoring, human response and incident leadership are described separately in the agreement.