917 Solutions, PO Box 141, Sanders, AZ (2026)

02/12/2026

"You're not too small to be hit. You're just small enough to be overlooked until it's too late."

This is the reality for small and midsize businesses in construction, engineering, and architecture.
Attackers don't ignore small businesses because they're not worth targeting. They focus on them because:

👉Security is often partially configured
👉MFA isn't enforced across all users
👉Personal devices access company data
👉Access granted for projects never gets removed

The bar for cybersecurity in most industries is surprisingly low. That's not meant to be comforting—it's meant to be motivating.

Once those fundamentals are in place, you're light years ahead of your competition. Not because you spent more, but because you actually took action.

Want to know where to start? Download our Microsoft 365 Hardening Checklist:https://917solutions.com/wp-content/uploads/2026/01/Microsoft-365-Hardening-Checklist-1.pdf

02/09/2026

Microsoft 365 has become the default operating system for modern work. Email, file storage, collaboration, identity, and access control all live under the same roof.

For small and midsize businesses, that's a win. One platform. One login. Everything connected.
It's also why attackers focus so much attention there.

When an attacker gets access to a Microsoft 365 account, the impact usually goes well beyond email.

That single set of credentials can open the door to shared files, internal conversations, project data, and information that was never meant to leave the organization.

Here's what most people don't realize: Cloud-based doesn't automatically mean locked down.

Security depends on how those tools are configured and revisited over time, not on the fact that they live in the cloud.

You're not too small to be hit. You're just small enough to be overlooked—until it's too late.

Want to know where the gaps usually show up? Read our latest blog: https://917solutions.com/youre-not-too-small-to-be-hit/

02/05/2026

Microsoft 365 SOPs

Harden your Microsoft 365 environment and reduce your attack surface.

Most Microsoft 365 security issues don't come from bad decisions. They come from inconsistent ones.

One admin enables MFA a certain way. Another handles onboarding slightly differently. A third skips a step because they're busy and plans to come back to it later.

None of those choices feel risky in the moment, but over time they create a lot of variation in how access and security are handled.

That's where standard operating procedures make a real difference.

Our Microsoft 365 Hardening Checklist walks you through:
✓ Identity and sign-in security
✓ Conditional Access policies
✓ Device trust and compliance
✓ Data protection and sharing
✓ Monitoring and response

Without documented procedures, security depends on memory and individual judgment. With SOPs in place, the environment stays predictable even when the people managing it change.

GET ACCESS to the Microsoft 365 Hardening Checklist:https://917solutions.com/wp-content/uploads/2026/01/Microsoft-365-Hardening-Checklist-1.pdf

02/03/2026

Sara mentioned this in our recent conversation, and it's a story we reference often with clients.

A small construction firm lost $200,000 to a hacker. They had cyber insurance, but they probably won't get that money back because they weren't following the security policies required by their insurance.

This is the reality we're seeing more and more: Cyber insurance isn't just a safety net anymore. It has requirements. And if you're not meeting them when an incident happens, you're on your own.
MFA for all users, not just admins. Regular security audits. Documented incident response plans. These aren't nice-to-haves—they're policy requirements.

The companies that are prepared don't just recover faster. They're the ones who actually get their claims paid.

Ready to make sure your security meets your insurance requirements? Let's audit your environment.

02/02/2026

Here's what we see in most Microsoft 365 environments:

They're not wildly misconfigured. They're only partially configured.

A phishing scare happens, so MFA gets enabled for leadership. An insurance renewal comes up, so a Conditional Access policy gets tested but left in report-only mode. A compliance questionnaire needs to be answered quickly, so legacy authentication stays enabled "just in case."

Security settings get turned on in some places but not others. Defaults stay in place longer than intended. Access expands as teams grow and projects change, then never gets reviewed.

From the outside, everything looks normal. People can still log in. Files still sync. Work continues.

That's what makes these issues hard to spot until there's a real problem.

The underlying issue isn't a lack of tools. It's the absence of a clear structure for how security settings are applied, enforced, and revisited as the business evolves.

Ready to establish that structure?

Download our Microsoft 365 Hardening Checklist:https://917solutions.com/wp-content/uploads/2026/01/Microsoft-365-Hardening-Checklist-1.pdf

01/28/2026

The bar for cybersecurity in most industries is surprisingly low.

That's not meant to be comforting—it's meant to be motivating.

When we work with construction firms, engineering teams, and architecture practices, we're often not implementing cutting-edge, expensive solutions. We're implementing the basics that should have been there all along.

The difference? Once those fundamentals are in place, you're light years ahead of your competition. Not because you spent more, but because you actually took action.

01/27/2026

Mind the Gap

These are the most common Microsoft 365 security gaps we see in small businesses:

✓ Sloppy Multifactor Authentication (MFA) - enabled for some, not all
✓ Conditional Access in Report-Only Mode - tested but never enforced
✓ Legacy Authentication Left Enabled - "just in case it breaks something"
✓ Messy Device Access Issues - personal devices accessing company data
✓ Permission & Sharing Sprawl - temporary access that never got removed

None of these issues feel urgent in isolation. They usually surface quietly and become part of the background.

Together, however, they create an environment where a single compromised account can expose far more than intended.

The underlying problem usually isn't a lack of tools. It's the absence of a clear structure for how security settings are applied, enforced, and revisited as the business evolves.

Want a practical checklist to start closing these gaps?
Download our Microsoft 365 Hardening Checklist:https://917solutions.com/wp-content/uploads/2026/01/Microsoft-365-Hardening-Checklist-1.pdf

01/26/2026

Most small and midsize businesses don't think of themselves as cyber targets. If something did happen, surely it would be obvious. Loud. Catastrophic.

That's not how most Microsoft 365 breaches start.

They usually begin quietly:

🚫A phishing email that looks routine
🚫A login from a device no one recognizes
🚫A user account with more access than it needs

Microsoft 365 sits at the center of how modern teams work. That convenience is exactly why attackers focus there. Not because your business is large, but because the environment is familiar, widely used, and often left partially secured.

In this article, we break down:

✅ Where security gaps usually show up
✅ Why small and midsize organizations are frequently targeted
✅ What "hardening" Microsoft 365 actually means in practical terms

No scare tactics. No jargon. Just clear insight into how risk shows up and how to start reducing it.

Read the full article: https://917solutions.com/youre-not-too-small-to-be-hit/

01/01/2026

How do we translate fear-driven conversations into empowered action?

Our Operations Manager, Sara, explains our approach: We don't lead with fear. We lead with partnership.

Yes, the threats are real. A small construction firm can lose $200,000 to a hacker. You're not too small to be hacked—you're just too small to make the news.

But here's what changes everything: Once we partner with our clients, we make sure you are well fortified. When you follow bare minimum cybersecurity compliance guidelines, you're going to be way ahead of anyone else in your space.

That's the shift from fear to empowerment. That's partnership.

12/31/2025

Happy New Year from all of us at 917 Solutions.

As we close out 2025, we're reflecting on what matters most: the people we serve and the communities we protect together.

To our clients: thank you for trusting us with what you've built. Your schools, hospitals, homes, and infrastructure make our world better.

To our partners in the AEC industry: thank you for your leadership, resilience, and commitment to building spaces where life happens.

Here's to 2026: new builds, strong partnerships, and the communities we'll continue to protect together.

Wishing you a happy, healthy, and prosperous new year.

With gratitude,
Gerty and the 917 Solutions team

12/29/2025

Sometimes AEC firms aren’t struggling with technology, they’re struggling with the way the technology fits into their day-to-day work.

That’s where structure and visibility make the biggest difference.

Here’s what that looks like with 917 Solutions:

Managed Microsoft 365 & Security
→ Offboarding that gets done the same way every time
→ Devices that stay updated and protected
→ Access that lines up with roles and deadlines

24/7 Security Operations
→ Support for phishing, malware, and ransomware
→ Gaps handled before they turn into incidents
→ Straightforward reporting for insurance and compliance

IT Strategy & Advisory
→ Microsoft environments cleaned up instead of patched together
→ Technology plans that follow project timelines
→ Guidance during transitions, acquisitions, and onboarding waves

When these pieces stay aligned, teams avoid the slowdowns that come from preventable issues like stale access, missing updates, unclear ownership, and systems that change without warning.

The firms we support want the same thing: steady operations, clear expectations, and technology that doesn’t interrupt the work. That’s exactly what a consistent lifecycle gives you.

If you’re reviewing your setup before the new year, this is a good time to look at the routines behind your tools and the places where things tend to slip.

12/26/2025

People leave. Projects continue. It's the gap between those two realities where the problems live.

Dormant accounts, forgotten devices, SharePoint sites still syncing to who-knows-where.

When HR and IT work from the same playbook, when every device gets handled the same way, when you can prove access actually ended, that's when departures become routine.

Boring, even.

That's our goal for you in 2026: Make security boring so you can focus on what you do best.

We’re grateful to partner with the firms that build the places our communities rely on, and we’re looking forward to supporting you in the year ahead.

917 Solutions

02/12/2026

02/09/2026

02/05/2026

02/03/2026

02/02/2026

01/28/2026

01/27/2026

01/26/2026

01/01/2026

12/31/2025

12/29/2025

12/26/2025

Address

Telephone

Website

Alerts

Contact The Business

Shortcuts

Share

Category