Lighthouse — Fully Managed IT, Security & Compliance

What’s Included

• Everything in Harbor and Beacon, plus:
• Full compliance program management (CMMC 2.0, FTC Safeguards Rule, GLBA, SOC 2, NIST CSF)
• Ongoing vCISO oversight — policy, risk assessment, and audit support
• Incident response planning and coordination
• Vendor and third-party risk management
• GRC (governance, risk & compliance) program oversight — policies, risk registers, and control ownership documentation
• Evidence and documentation management for audits and assessments

Microsoft 365 Support Included

• Everything in Harbor and Beacon, plus:
• 24/7 delegated security monitoring inside your Microsoft Defender environment
• Zero Trust identity and Conditional Access architecture
• Microsoft Purview compliance program management (data loss prevention, retention, eDiscovery)
• Full-tenant Microsoft 365 backup with quarterly recovery testing

See full Microsoft 365 service details →

Who Lighthouse Is For

Lighthouse fits businesses under active regulatory or contractual compliance obligations — DoD contractors facing CMMC 2.0, financial services firms under GLBA and FTC Safeguards, and any business that needs to demonstrate a documented, audit-ready security program. Not sure where you stand? Start with an IT audit and readiness assessment.

Not Sure Which Program Fits?

Most businesses aren’t certain where they land until we walk through it together.