Client Security Requirements
Client Security Requirments
Ensure your business meets minimum IT security standards.
All managed service clients must follow these requirements to protect devices, data, and network systems. This page outlines the essential policies, password rules, multi-factor authentication, and device security needed before onboarding with Gorey IT Solutions.
To ensure reliable and secure IT systems, all clients must meet the following baseline security standards before full service can begin.
If your current setup does not meet these standards, Gorey IT Solutions can implement the required changes as part of onboarding.
- Password Security
• Strong passwords must be used across all systems and accounts
• Password reuse across multiple systems is not permitted
• Default or shared passwords must be removed
• A secure password management approach must be in place
- Multi-Factor Authentication (MFA)
• MFA must be enabled on all critical systems where available
• This includes email accounts, remote access, and administrative logins
- Device Security
• All devices must be protected with up-to-date antivirus software
• Operating system and third-party updates must be applied regularly
• Devices must not be running unsupported or end-of-life software
• Basic device protections must be in place (e.g. screen lock, user accounts)
- Access Control
• Users should only have access to the systems and data they require
• Administrative privileges must be limited and controlled
• Shared user accounts should not be used
- Ongoing Compliance
• These standards must be maintained for the duration of the service
• Non-compliance may impact support, security, and response times
Implementation
If your business does not currently meet these standards, Gorey IT Solutions will:
• Review your existing setup
• Identify gaps and risks
• Implement the required changes as part of onboarding
This ensures your systems are secure, stable, and ready for ongoing management.
