FunctionOne analysts monitor 24/7
Security analysts watch your connected systems 24/7, investigate what they find and contain threats only within the authority your leadership approves. They then give you their findings.
How we work
How FunctionOne works with a new client
FunctionOne begins a new client relationship with a security assessment, then works through set stages: confirm the scope, agree response rules, connect and validate, and review and maintain. We review your systems and accounts and agree scope and response rules before anything is switched on. After that, leadership gets a monthly summary and a regular security review, with owners and next steps named in the reports.
How does FunctionOne onboard a new client?
FunctionOne opens MSP onboarding with a security assessment. We review your systems and accounts first. Then we agree the scope and the response rules with your leadership, and nothing is switched on until both are settled.
From there, our team follows the managed IT onboarding process in set stages. We confirm the scope, agree response rules, connect and validate your systems, and then review and maintain the service. Leadership gets a monthly summary and a regular security review. Those reports name owners and next steps.
The service comes fully managed, or co-managed beside your in-house IT team. CISA's Cross-Sector Cybersecurity Performance Goals 2.0 (2025) call for an understanding of the services, including the security products, a managed service provider supplies, and a contract that says how and when the provider reports incidents. NIST's Incident Response Recommendations and Considerations for Cybersecurity Risk Management (SP 800-61 Rev. 3, 2025) says that with an outside provider, the contract defines the split of duties, information flows, coordination and authority to act, including limits on what the provider may do.
Who does what when FunctionOne runs the service?
FunctionOne and your leadership agree up front who handles which part of the work.
FunctionOne coordinates onboarding
We coordinate onboarding and integrations with your systems. Once the service is running, we manage it.
FunctionOne supports escalations and remediation
We support escalations and organize remediation. Our reports name the owner and next step for each fix.
Your leadership tells FunctionOne what's critical
Your leaders name the critical operations the business depends on, and they approve the response authority our analysts work within.
Your leadership makes the calls
Your leaders make business and risk decisions. They also direct outside communications, including messages to a board, insurer, auditor or parent company.
How FunctionOne onboards a new client, from assessment to monthly reports
FunctionOne starts with a security assessment, then works through four stages that take the service from agreed scope to monthly reports.
Start with a security assessment
We review your systems and accounts so both sides can see what's there before anything is switched on.
Confirm the scope
Your leadership names its critical operations, and we agree on what the service covers, whether fully managed or co-managed beside your in-house IT team.
Agree response rules
You approve the response authority our 24/7 analysts may use, so containment happens only within rules you've signed off.
Connect and validate
FunctionOne coordinates onboarding and integrations.
Review and maintain
Leadership gets a monthly summary and a regular security review, with reports that name owners and next steps.
Why does FunctionOne agree scope and response rules before switching anything on?
CISA's Cross-Sector Cybersecurity Performance Goals 2.0, published in 2025, call for an understanding of the services, including the security products, that a managed service provider supplies, and a contract that says how and when the provider reports incidents. You know which systems and accounts we reviewed and what the service covers.
NIST's Incident Response Recommendations and Considerations for Cybersecurity Risk Management (SP 800-61 Rev. 3), published in 2025, says that with an outside provider, the contract defines the split of duties, information flows, coordination and authority to act, including limits on what the provider may do. You approve the authority our analysts use. Your leadership makes business and risk decisions and directs outside communications.
Questions about how FunctionOne works with new clients
What is the first step when FunctionOne takes on a new client?
The first step is a security assessment. FunctionOne reviews your systems and accounts, then agrees the scope of the service and the response rules with your leadership. Nothing gets switched on until both of those are settled.
Does FunctionOne replace an in-house IT team?
Not necessarily. FunctionOne offers fully managed IT, or co-managed IT beside your in-house IT team.
What can FunctionOne's analysts do without asking first?
FunctionOne's 24/7 security analysts monitor, investigate and contain threats only within the response authority your leadership approves. They also give you their findings. Business and risk decisions and outside communications stay with your leadership.
What reports does leadership get from FunctionOne?
Leadership gets a monthly summary and a regular security review from FunctionOne. Reports name owners and next steps, so executives who answer to a board, insurer, auditor or parent company can see who is handling what.
Where does FunctionOne work from?
FunctionOne works from two offices: Syracuse, New York, at 6216 Thompson Road, where the company has been since 1992, and Tampa, Florida, now open at 401 East Jackson Street. Both offices use the same phone number, 315-437-6714, for now.