# Precision IT - Full Technical Documentation

> Precision IT is Australia's cloud-first Managed Services Provider (MSP). ISO 27001 certified, Essential 8 aligned. 55 staff across Gold Coast, Sydney, Melbourne, Brisbane, and New Zealand. Founded in 2008, supporting 500+ customers and 8,500+ end-users.

## Company Overview

- **Founded:** 2008
- **Employees:** 55 across Australia and New Zealand
- **Customers:** 500+ customers
- **End-users supported:** 8,500+
- **Phone:** 1300 964 404
- **Email:** info@precisionit.com.au
- **Website:** https://www.precisionit.com.au
- **Support Portal:** https://help.precisionit.com.au

### Office Locations
- **Gold Coast (HQ):** Office 437/34-36 Glenferrie Drive, Robina, QLD 4226
- **Sydney:** Level 8, 99 Walker Street, North Sydney, NSW 2060
- **Melbourne:** Level 6, 607 Bourke St, Melbourne, VIC 3000
- **Brisbane:** Level 1, 470 St Pauls Tce, Fortitude Valley, QLD 4006
- **New Zealand:** Service operations throughout the country

### Core Values
1. Integrity - Transparency, honesty, and ethical decision-making
2. Innovation - Cutting-edge technology adoption
3. Quality - Reliable, high-performance IT services
4. Accountability - Responsibility for outcomes and service excellence
5. Collaboration - Client partnership for aligned IT strategy

### Certifications & Awards
- **ISO 27001 Certified** - Information Security Management System
- **Essential 8 Aligned** - Australian Cyber Security Centre framework
- **2024 APJ Citrix Service Provider Partner of the Year**
- **2024 Ingram Micro APC Partner of the Year**

### Client Portfolio
- Healthcare & Aged Care: Blue Cross, Summit Care, Eve Health
- Retail & E-commerce: Grays Online, Hotondo Homes
- Professional Services: William Roberts, People2People
- Education & Childcare: Queensland Childcare Services, Danila Dilba
- Manufacturing & Construction: Coral Homes, ADG, Boyd Blue

---

## Zephyr Managed IT Services

Zephyr is Precision IT's structured Managed IT and Security Service platform. Available in six tiers to accommodate different business needs.

### Zephyr Business
- **Target:** Businesses up to 299 employees needing fully managed IT with end-user support
- **Includes:** Microsoft 365 licensing for all users
- **End-User Support:** Business hours remote IT support, troubleshooting, proactive endpoint management
- **Security:** Huntress EDR & MDR, Microsoft Defender for Business, Essential 8 Maturity Level 2-3
- **Backup:** SkyKick M365 Backup (6x daily for Exchange, OneDrive, SharePoint, Teams)
- **Identity:** Zero-trust model with Microsoft Entra ID, Intune, Defender, Always-On VPN
- **Monitoring:** Precision WATCH RMM with automated patching and compliance reporting

### Zephyr Business Plus
- Everything in Zephyr Business, plus:
- Cyber Awareness Training with phishing simulations
- Enhanced vulnerability scanning & blocking (Defender Vulnerability Management)
- Compliance Documentation Package for regulatory audits
- Keeper Enterprise password management

### Zephyr Essentials
- **Target:** Businesses with internal IT teams needing security/compliance support (co-managed)
- **No end-user support or Microsoft licensing included**
- Managed Threat Detection & Response (Huntress MDR, Defender for Business, Fortinet UTM)
- Fortinet SD-WAN for secure site-to-site and cloud connectivity
- Microsoft Purview Data Classification, DLP, and Insider Risk Management
- Essential 8 alignment with monthly compliance reporting
- Supports internal IT teams with automation, security, and compliance frameworks

### Zephyr Essentials Plus
- Everything in Zephyr Essentials, plus:
- Cyber Awareness Training
- Enhanced vulnerability scanning & blocking
- Compliance Documentation Package
- Keeper Enterprise password management

### Zephyr Enterprise
- **Target:** Organisations requiring fully managed IT with custom Microsoft licensing
- All Zephyr Business services with independent licensing management
- Custom end-user profiles and licensing flexibility per job role
- Multi-site connectivity, hybrid cloud infrastructure support
- Custom security policies per department or business unit

### Zephyr Enterprise Plus
- Everything in Zephyr Enterprise, plus:
- Cyber Awareness Training
- Enhanced vulnerability scanning & blocking
- Compliance Documentation Package (ISO 27001, HIPAA, Essential 8)
- Keeper Enterprise password management

### Zephyr Feature Comparison

| Feature | Business | Business Plus | Essentials | Essentials Plus | Enterprise | Enterprise Plus |
|---------|----------|---------------|------------|-----------------|------------|-----------------|
| End-User Support | Yes | Yes | No | No | Yes | Yes |
| Microsoft Licensing | Included | Included | Separate | Separate | Separate | Separate |
| Cybersecurity & Compliance | Included | Enhanced | Included | Enhanced | Included | Enhanced |
| Backup & Disaster Recovery | Included | Enhanced | Included | Enhanced | Included | Enhanced |
| Device & Identity Management | Included | Enhanced | Included | Enhanced | Included | Enhanced |
| IT Governance & Reporting | Included | Enhanced | Included | Enhanced | Included | Enhanced |
| Cyber Awareness Training | No | Yes | No | Yes | No | Yes |
| Vulnerability Scanning | No | Yes | No | Yes | No | Yes |
| Compliance Documentation | No | Yes | No | Yes | No | Yes |
| Keeper Password Manager | No | Yes | No | Yes | No | Yes |

### Onboarding Process
1. **Discovery & Assessment:** IT infrastructure review, stakeholder workshops, network & security audit
2. **Configuration & Security Hardening:** Baseline security policies, threat protection deployment, backup setup
3. **Deployment & Go-Live:** User training, 30-day post-deployment monitoring, compliance reporting

---

## Cloud Ascend Platform

Cloud Ascend is Precision IT's cloud operations and governance framework. Modular approach across five service pillars.

### Service Tiers
- **Base Managed Services:** SysOps, cost optimisation, CloudCheckr insights
- **Enhanced Operations:** SysOps + SecOps, DevOps, GovOps available
- **Project Services:** SecOps, DevOps, GovOps, endpoint management (project-based)
- **Modern Workspace:** SecOps, GovOps, Citrix DaaS/AVD, endpoint management

### Service Pillars

#### 1. Systems Operations (SysOps)
- Cloud infrastructure management (tagging, inventory, configuration governance)
- Cost optimisation with billing alerts, auto-scaling recommendations, anomaly detection
- Backup & disaster recovery with continuous monitoring
- Performance & availability monitoring with proactive remediation

#### 2. Security Operations (SecOps)
- Identity & access management (conditional access, SSO, MFA enforcement)
- AI-driven threat detection & response with SIEM integration
- Compliance & security baselines (Microsoft Purview, Defender, Fortinet UTM)
- SOC integration and vulnerability patching

#### 3. Development Operations (DevOps)
- CI/CD pipeline management with automated deployment and rollback
- Infrastructure as Code (IaC) with Terraform
- Application performance monitoring with auto-scaling
- Secure deployment & release automation

#### 4. Governance Operations (GovOps)
- Regulatory compliance & audit support with Microsoft Purview
- Automated data discovery & classification
- Information protection & data loss prevention
- Policy enforcement for Essential 8, ISO 27001

#### 5. Modern Workspace
- Citrix DaaS / Azure Virtual Desktop (AVD) for remote work
- Intune endpoint & device management
- Identity-driven secure collaboration controls
- User experience optimisation and compliance tracking

### Supported Platforms
- Microsoft Azure
- Amazon Web Services (AWS)
- Microsoft 365
- Citrix Cloud
- CloudCheckr for cost insights

---

## Secure Network Service (SD-WAN)

Fortinet-powered SD-WAN managed service for secure, high-performance multi-site connectivity.

### Key Capabilities
- **Intelligent Traffic Steering:** Dynamic routing based on application priority, latency, and network conditions
- **Multi-Transport Support:** MPLS, broadband, 4G/5G, and satellite
- **SaaS Optimisation:** Low-latency access to Microsoft 365, AWS, and Azure
- **Fortinet NGFW Integration:** Built-in IPS, malware protection, SSL inspection
- **Zero Trust Network Access (ZTNA):** Policy-based access control by identity, device posture, and location
- **AI-Driven Security:** Real-time threat intelligence for ransomware and DDoS mitigation
- **FortiManager & FortiAnalyzer:** Single-pane-of-glass management and analytics
- **99.99% Uptime:** Multi-path failover with automated redundancy
- **24/7 Monitoring:** Managed by dedicated SD-WAN operations team

### Deployment Options
- On-Premises: FortiGate SD-WAN appliances at each site
- Cloud-Delivered: Hosted in Azure, AWS, or private cloud
- Hybrid WAN: MPLS integration with internet-based SD-WAN

### Compliance Alignment
- Essential 8, ISO 27001, NIST frameworks
- PCI DSS, HIPAA, APRA CPS 234 for regulated industries

---

## Cloud & Infrastructure Solutions

### Azure Virtual Desktop (AVD)
- Secure remote work deployment with Windows Virtual Desktop
- Multi-session Windows 11 support, FSLogix profile management
- Integration with Microsoft Entra ID and Conditional Access
- Cost optimisation through reserved instances and auto-scaling

### Citrix DaaS
- High-performance virtual desktops for GPU-accelerated workloads
- Published applications and session-based desktops
- Citrix ADC for load balancing and SSL offloading
- Cloud DaaS hosted in Azure or on-premises hybrid

### Hybrid Cloud Strategy
- Integration of on-premises infrastructure with Azure & AWS
- Azure ExpressRoute and AWS Direct Connect for low-latency connectivity
- Azure Stack HCI for edge workloads
- VMware cloud migration to Azure VMware Solution (AVS)

### Cloud Migration Services
- Azure Migrate for lift-and-shift migrations
- Re-platforming strategies for cloud-native architectures
- Database modernisation (SQL to Azure PaaS)
- Data center decommissioning with phased migration plans
- Minimal downtime migration with cutover planning

### Cloud Cost Optimisation
- CloudCheckr for cost visibility and anomaly detection
- Right-sizing recommendations for compute and storage
- Reserved instances and spot instance strategies
- FinOps practices for budget governance
- Automated cost alerting and tagging compliance

### Infrastructure as Code (IaC)
- Terraform for multi-cloud provisioning (Azure, AWS)
- Azure Resource Manager (ARM) templates
- AWS CloudFormation for automated infrastructure
- GitOps workflows for infrastructure version control

### Microsoft 365 Tenant Consolidation
- Tenant-to-tenant migration strategies
- Exchange Online cutover and hybrid migration
- SharePoint and OneDrive data migration
- Identity federation and domain management

### Zero Trust Network Architecture
- Microsoft Entra ID (Azure AD) for identity foundation
- Conditional Access policies and MFA enforcement
- Fortinet SD-WAN for network micro-segmentation
- Continuous verification and least-privilege access

### Multi-Site SD-WAN Deployment
- Fortinet FortiGate appliances across distributed locations
- Centralised management via FortiManager
- Application-aware routing and QoS policies
- Proven at scale (e.g., Grays Online 12-location deployment)

---

## Cybersecurity & Compliance Solutions

### Essential 8 Implementation
- Full ACSC Essential 8 assessment, gap analysis, and remediation
- Application control and application whitelisting
- Patching applications and operating systems
- Microsoft Office macro settings hardening
- User application hardening
- Restricting administrative privileges
- Multi-factor authentication enforcement
- Regular backup implementation and testing
- Maturity Level 1-3 implementation pathways
- Monthly compliance reporting and posture tracking

### Identity & Access Management (IAM)
- Microsoft Entra ID (formerly Azure AD) deployment
- Conditional Access policies based on user, device, location, and risk
- MFA enforcement across all users
- Single Sign-On (SSO) for SaaS and on-premises applications
- Privileged Access Management (PAM) with just-in-time (JIT) controls
- Self-service password reset and identity governance

### Endpoint Security & MDR
- Huntress Managed Detection and Response (MDR) 24/7
- Microsoft Defender for Business with attack surface reduction
- Automated threat remediation and incident response
- Endpoint Detection and Response (EDR) with threat intelligence
- Ransomware protection with behavioural analysis

### SIEM & Security Monitoring
- Microsoft Sentinel (Azure Sentinel) deployment
- Real-time log analysis and threat correlation
- Automated incident response playbooks
- Custom detection rules and analytics
- Integration with Microsoft 365, Azure, and third-party sources
- Security orchestration, automation, and response (SOAR)

### Vulnerability Management
- Defender Vulnerability Management (formerly Tenable Nessus)
- Continuous network scanning and risk assessment
- Compliance reporting for Essential 8, ISO 27001
- Remediation tracking and prioritisation
- Patch management integration

### Data Loss Prevention (DLP)
- Microsoft Purview for data classification
- Sensitive data discovery and labelling
- DLP policy enforcement across Exchange, SharePoint, Teams
- Insider Risk Management monitoring
- Encryption and rights management

### Cloud Security Posture Management (CSPM)
- Microsoft Defender for Cloud across Azure and AWS
- Security score monitoring and improvement recommendations
- Compliance dashboards for regulatory standards
- Misconfiguration detection and automated remediation

### Incident Response
- Defender for Business automated containment
- Fortinet UTM integration for network-level response
- Incident investigation and forensic analysis
- Post-incident reporting and lessons learned
- Business continuity coordination

### Device Management
- Microsoft Intune for MDM and MAM
- Application deployment and policy enforcement
- Compliance policy enforcement and conditional access
- Windows Autopilot for zero-touch provisioning
- BYOD and corporate device management

---

## Managed IT & Modern Workspace Solutions

### Microsoft 365 Hardening
- MFA enforcement for all users
- Conditional Access policies (location, device, risk-based)
- Exchange Online protection and anti-phishing
- SharePoint and OneDrive access controls
- Teams governance and external sharing policies

### Cyber Awareness Training
- Huntress Security Awareness Training (formerly LMS)
- Simulated phishing campaigns with progressive difficulty
- Compliance tracking and reporting
- Role-based training modules
- Post-incident targeted training

### Enterprise Password Management
- Keeper Security deployment and management
- Credential vaulting with AES-256 encryption
- Password policy enforcement and rotation
- Secure credential sharing for teams
- Role-based access controls
- Dark web monitoring for compromised credentials

### Always-On VPN & Remote Access
- Azure VPN Gateway for site-to-site and point-to-site
- Fortinet SSL-VPN for secure remote access
- Split-tunnel and full-tunnel configurations
- Integration with Conditional Access and MFA
- Always-On connectivity for hybrid workforces

### Teams & SharePoint Security
- Document classification and sensitivity labels
- External sharing controls and guest access policies
- Retention policies and legal hold
- eDiscovery for compliance and legal requirements
- Audit logging and activity monitoring

### Backup & Disaster Recovery
- SkyKick Cloud Backup for Microsoft 365
  - 6x daily backups for Exchange, OneDrive, SharePoint, Teams
  - Point-in-time recovery and granular restore
- Azure Backup for VMs and SQL databases
- Disaster recovery planning and testing
- RTO under 5 minutes for critical workloads
- Ransomware recovery with immutable backups

### Hybrid Identity Management
- Microsoft Entra ID Connect for AD sync
- Password hash sync and pass-through authentication
- Seamless SSO across cloud and on-premises
- Azure AD Application Proxy for on-premises apps
- Staged migration from on-premises AD to cloud-only

---

## Cloud DevOps & Automation Solutions

### CI/CD Pipeline Implementation
- Azure DevOps for build, test, and release pipelines
- GitHub Actions for automated workflows
- AWS CodePipeline for AWS-native deployments
- Blue-green and canary deployment strategies
- Automated testing and quality gates

### Infrastructure as Code (IaC)
- Terraform for multi-cloud infrastructure provisioning
- Azure Resource Manager (ARM) templates
- AWS CloudFormation templates
- State management and drift detection
- Module libraries for reusable infrastructure components

### Container Orchestration
- Azure Kubernetes Service (AKS) deployment and management
- Amazon EKS for AWS workloads
- AWS Fargate for serverless containers
- Docker containerisation and image management
- Network policies, RBAC, and secrets management

### Serverless Computing
- Azure Functions for event-driven workloads
- AWS Lambda for auto-scaling compute
- Integration with Azure Logic Apps and N8N workflows
- Cost-effective pay-per-execution model
- Event-driven automation for business processes

### Cloud Monitoring & Observability
- Precision WATCH RMM for endpoint monitoring
- Azure Monitor and Log Analytics
- AWS CloudWatch for AWS workloads
- Datadog integration for full-stack observability
- Custom alerting and automated remediation

### GitOps & Version Control
- Git-based infrastructure workflows
- Branch policies and pull request reviews
- Automated deployment on merge
- Infrastructure change tracking and rollback
- Compliance-as-code with policy enforcement

### DevSecOps Integration
- Security scanning in CI/CD pipelines (SAST, DAST)
- Dependency vulnerability scanning
- Container image scanning
- Compliance automation with Terraform and Defender
- Shift-left security practices

### Database Modernisation
- SQL Server to Azure SQL Database migration
- Azure Database for PostgreSQL and MySQL
- Managed instance for legacy compatibility
- Performance optimisation and scaling
- Data migration with minimal downtime

---

## Industry-Specific IT Solutions

### Healthcare & Aged Care
- Privacy Act readiness and health data privacy control frameworks
- Patient data security with Microsoft Purview
- Telehealth platform infrastructure (Azure-based)
- Medical device security and network segmentation
- Azure Health Data Services integration
- 24/7 monitoring for clinical systems
- Secure remote access for care providers
- Clients: Blue Cross, Summit Care, Eve Health

### Financial Services
- APRA CPS 234 compliance implementation
- PCI DSS certification support
- Real-time fraud detection with Sentinel SIEM
- Zero Trust architecture for banking infrastructure
- Data sovereignty with Australian-hosted cloud
- Secure transaction processing and encryption
- Regulatory compliance reporting and audit support

### Legal & Professional Services
- Microsoft Purview for document security and classification
- Ethical walls and information barriers
- eDiscovery for litigation support
- Client confidentiality protection with DLP
- Secure document management and access control
- Knowledge management and CRM integration
- Clients: William Roberts, People2People

### Education & Childcare
- Privacy Act compliance for student data
- Microsoft 365 Education deployment
- Secure BYOD management with Intune
- Cloud learning platform infrastructure
- Data protection for minors and vulnerable populations
- Clients: Queensland Childcare Services, Danila Dilba

### Retail & E-commerce
- Auto-scaling cloud infrastructure for peak demand
- PCI DSS compliant payment processing
- POS system integration and security
- Inventory sync across physical and online channels
- Omnichannel technology integration
- Clients: Grays Online, Hotondo Homes

### Manufacturing & Construction
- Multi-site connectivity with Fortinet SD-WAN
- CAD/PLM cloud integration
- Industrial IoT security and network segmentation
- Secure file access across distributed sites
- ERP and supply chain system connectivity
- Clients: Coral Homes, ADG, Boyd Blue

---

## Technology Stack

### Microsoft
- Azure (IaaS, PaaS, AVD, Sentinel, Defender for Cloud)
- Microsoft 365 (Exchange, SharePoint, Teams, OneDrive)
- Microsoft Entra ID (Azure AD, Conditional Access, MFA)
- Microsoft Intune (MDM, MAM, Autopilot)
- Microsoft Defender for Business (EDR, attack surface reduction)
- Microsoft Purview (DLP, data classification, insider risk)
- Microsoft Sentinel (SIEM, SOAR)
- Microsoft Copilot (AI productivity tools)
- Azure DevOps (CI/CD pipelines)

### Amazon Web Services
- EC2, S3, RDS for compute, storage, and databases
- AWS Lambda for serverless computing
- EKS and Fargate for container orchestration
- AWS CodePipeline for CI/CD
- CloudWatch for monitoring
- AWS Direct Connect for hybrid connectivity

### Fortinet
- FortiGate NGFW (firewall, IPS, SSL inspection, web filtering)
- FortiManager (centralised management)
- FortiAnalyzer (security analytics and reporting)
- FortiSwitch and FortiAP (switching and wireless)
- SD-WAN with intelligent traffic steering

### Citrix
- Citrix DaaS (Desktop as a Service)
- Citrix Virtual Apps and Desktops
- Citrix ADC (load balancing, SSL offloading)
- GPU-accelerated virtual workstations

### Security Partners
- Huntress MDR (24/7 endpoint protection and threat detection)
- SkyKick (Microsoft 365 backup, 6x daily, migration tools)
- Keeper Security (enterprise password management, dark web monitoring)
- Tenable / Defender VM (vulnerability scanning and risk assessment)

### Automation & Monitoring
- Precision WATCH RMM (remote monitoring and management)
- Terraform (Infrastructure as Code)
- Azure Logic Apps and N8N (workflow automation)
- CloudCheckr (cloud cost optimisation and governance)
- Datadog (full-stack observability)

---

## Strategic Partnerships

### Microsoft Solutions Partner
- **Designations:** Infrastructure, Modern Work
- **Advanced Specialisations:** Azure, Security, Compliance, Cloud Migration
- Enables tailored Microsoft 365, Azure, and security solutions

### AWS Select Partner
- Cloud infrastructure, cost optimisation, and cloud-native expertise
- AWS architecture, automation, and governance frameworks

### Citrix Premier Partner
- Virtual Desktop Infrastructure (VDI) and Cloud DaaS
- Secure remote work environments
- 2024 APJ Citrix CSP Partner of the Year

### Fortinet Advanced Partner
- Next-generation firewall and SD-WAN solutions
- Unified Threat Management (UTM)
- Network security architecture design and management

### Huntress MDR Partner
- 24/7 endpoint protection and automated remediation
- Threat detection and incident response
- Security Awareness Training platform

### SkyKick Cloud Partner
- Microsoft 365 backup and data protection
- Cloud migration tools and email continuity
- 6x daily backup with granular restore

### Tenable Vulnerability Partner
- Continuous vulnerability scanning
- Risk assessment and compliance reporting
- Integration with patch management workflows

---

## Measurable Outcomes

- 500+ customers supported across Australia and New Zealand
- 8,500+ end-users supported
- 99.99% uptime SLA with automated failover
- Sub-5-minute RTO for critical disaster recovery workloads
- 30-40% cloud cost reduction through CloudCheckr and FinOps
- 77% productivity gains with Microsoft 365 and Copilot implementations
- $35M ROI demonstrated over 3 years for modern workplace deployments
- 90% deployment time reduction with automated CI/CD pipelines
- Essential 8 Maturity Level 2-3 achieved for managed clients
- 6x daily backup frequency for Microsoft 365 data

---

## Contact & Next Steps

- **Phone:** 1300 964 404
- **Email:** info@precisionit.com.au
- **Website:** https://www.precisionit.com.au
- **Support:** https://help.precisionit.com.au
- **Free Assessment:** https://www.precisionit.com.au/assessment/essential-8
- **Solution Selector:** https://www.precisionit.com.au/solution-selector
- **Consultation:** https://www.precisionit.com.au/services/request-consultation
- **Proof & Evidence:** https://www.precisionit.com.au/why-precision-it/proof