Set up right.Kept running.Locked down.
MOH Managed builds and runs the systems Montréal businesses depend on — servers, networks and hardware, the cloud platforms you host on, and the applications your work actually happens in. Then we keep the security around all of it tight.
Everything between the wall socket and the cloud.
- Systems & networks
- Servers, switches, firewalls and Wi-Fi — designed and built to be maintained, not rescued.
- Hardware
- Sourcing, imaging and deployment for workstations, laptops and on-site kit, through to end of life.
- Cloud platforms
- AWS, Azure, Microsoft 365, Vercel, Supabase — whatever you host on, set up properly and reviewed for access, firewall rules and exposure.
- Business applications
- Practice management, point of sale, e-commerce and the line-of-business tools your day runs on.
- Monitoring & support
- Systems watched around the clock, with a real person answering the ticket.
- Security & backup
- Endpoint protection, patching, and restores that have actually been tested.
The work, and how it was verified.
Clients are described, never named — what they run is their business, not our marketing. Every figure below is one we can evidence.
Cloud backup and security baseline
The client had no backups. They also had a privileged account with multi-factor authentication switched off, and no separation between root, administrative and everyday access. We fixed the second problem on paper and the first one in production.
- Identity first. Reviewed every account for MFA status, password age and last sign-in. A privileged identity that is both unprotected and unwatched is the worst combination there is, and it led the report.
- Backups built from scratch. Hourly snapshots across 14 production tables, into a dedicated vault with its own encryption key, so nothing shares a key with anything else.
- Verified, not assumed. A full 24-hour window checked job by job: every job inside its start window, every recovery point encrypted.
- Restore testing automated. A 12-hour cycle that restores a recent recovery point and confirms the data comes back. An untested backup is a hope, not a control.
- The edge reviewed. Web application firewall configuration on the CDN, and the TLS certificate verified against the certificate manager — expiry documented, renewal alerting recommended before it lapsed.
- Ten findings, ranked. Handed over with a severity, an owner and an order of work — including the items that were ours to fix, named as ours.
336 jobs. 336 completed. Zero failures, zero missed cycles.
GxP systems and lab infrastructure at Moderna
Pharmaceutical manufacturing runs under GxP — good practice regulations where any system touching product quality has to be validated, access has to be controlled and provable, and changes are documented because a regulator can ask to see them. It is the closest thing in industry to the standard a law firm or a financial adviser is held to.
- Sole on-site specialist. Single point person for validated workstations and lab systems across a manufacturing facility supporting 80 to 100 people.
- Access granted deliberately. Identity and network administration in an environment where access is given on purpose, recorded, and has to be defensible long after the fact.
- Change that survives being asked about. Infrastructure and deployment work carried out where a misconfiguration is a compliance event rather than just an outage, and where every change has to hold up to a question asked months later.
Working somewhere that gets audited changes how you build everywhere else.
Also behind MOH Managed: retail point-of-sale automation at Aptos, and enterprise desktop engineering inside a Canadian financial institution.Named as background — prior employment and contract engagements. No association or endorsement is implied, and nothing is said about any of these environments.
Regulated, busy, or both.
Legal firms
Matter files, practice management and email that has to stay confidential, retained correctly, and available the morning of a hearing.
Financial firms
Regulated environments where access control, audit trails and tested backups have to hold up to an examiner, not just to us.
Restaurants & hospitality
Point of sale, payments and guest Wi-Fi that cannot go down at seven on a Friday.
Retail & e-commerce
Tills, stock and the web store — Lightspeed through to whatever the site itself runs on.
Would you pass a cyber insurance assessment?
Twelve questions written for your industry, three minutes, and no email required to see your result.
Be first to know
Need help now? contact@mohmanaged.ca